Static NATfrom inside to outside

Hi,

I need help in PIX configuration. Actually i had testing tool BUGZILLA in one of my servers and want to make it public so that everyone can use it

For this i have one public IP and want to do a static nat on it. I want if anyone open link "http://public ip /BUGTEST" it will automayically redirect to my server

Is that posible?

Can anyone tell me the correct configuration please.

Thanks CK-NET

Reply to
NETADMIN
Loading thread data ...

Presuming you have PIX 6.2 or PIX 6.3:

access-list out2in permit any interface outside eq http access-group out2in in interface outside static (inside,outside) tcp interface http PRIVATEIP http

and check to be sure you haven't turned off the http fixup.

Reply to
Walter Roberson

I am using PIX 6.3

And in inside my server's IP is 192.168.1.236.

Thanks CK-NET

Reply to
NETADMIN

Does i have to do static NAT in this case

Reply to
NETADMIN

Please include enough of the context of previous discussions so that people can figure out what is going on without having to refer back to the previous messages. Merv is the only regular poster who uses googlegroups extensively; for the rest of us, the previous messages are -not- "right there" to be referred to. Indeed, in one of the recent threads, two key posts in the thread never made it to the news server I use, and as context was not sufficiently quoted I am unable to be of assistance to them.

[PIX 6.3] [internal server address is 192.168.whatever] [simple request to forward http requests from the single public IP to the internal server]

Yes, you need static NAT in order to allow new connections to your internal server when it is not using a public IP internally. [If it did happen to be using a public IP internally, then static would still work fine, but there would also be one other command that could be used instead.]

Just substitute that 192.168 address in to the 'static' command that I showed

static (inside,outside) tcp interface http 192.168.x.x http

that together with the two other lines that I showed are all you need for your situation.

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.