pix 501 problem with traffic

In article , Tomalo wrote: :Hi, I have problem with traffic from internal network to external interface :my PIX 501. :Because I have one public IP (ex. 1.2.3.4) I defined port forwarding.

The configuration statements you included all look reasonable.

When you are not able to connect to 1.2.3.4 port 25, are you starting from "outside" the PIX or "inside" the PIX ?

If you are starting from "inside" the PIX, then you cannot do what you are attempting to do. The PIX 501 will never accept traffic on an interface, translate it, and forward it back out the -same- interface, as would be required in order for an inside system to use the public IP and have the port forwarded to the appropriate inside host.

There are a few different ways to deal with this. The more reasonable ones have you use the host *name* instead of the host *address*, and then arrange so that "inside" the PIX the name resolves to the internal IP but outside the PIX the name resolves to the public IP. This often involves adding the 'dns' keyword to your "static" statements, and -might- involve changing data in your DNS server.

Thanks, I will try

tomalo