SSH.. advise pls

[rifki]

Hi..

We want to colocation our web and mail server using Cobalt. conf is :

Internet ---- PIX - Proxy - LAN

|

Mail&Web Serv

How we can ssh our Mail&web Serv ? should i just add command : access-list acl_out permit tcp any host proxy eq 22

Thank's

[nkhawaja]

Hi,

The access-list is correct, but you also need a static translation for your pxoy host.

Thanks

Nadeem

[rifki]

like this :

static (inside,outside) proxy proxy netmask 255.255.255.255 0 0

access group acl_in in interface inside

name x.x.x.x proxy

Thank's

[nkhawaja]

Yes, but access-list be applied on less secure interface e.g. outside.

Thanks

Nadeem