Hello
Is there a way to tell the pix to send traffic originating from a certain server on the Internet to a server on my internal network over specific ports with return traffic going out over a specific port range? The traffic is being sent to my outside interface but I only want it forwarded if it is coming from that one server's IP address.
There are at least two ways:
1) set up an access-list that permits that traffic and apply it to the outside interface via an access-group command 2) use "policy-static", which is an access-list applied as a 'static' command; for any traffic that does not match the access-list, the translation will not exist and so the pix will deny the other traffic.Thank you for responding Walter. You're an important contributor to this group and I appreciate the help. Liz
Walter Robers> >
Have something to add? Share your thoughts — no account required.
Ask the community — no account required