Hi All,
I been told to configure the PIX firewall 506E with the
following lines and was wondering if this looks right to
you guys who have a Cisco Pix firewall running sbs
2003/win 2k3:
static (inside,outside) yourpublicip 192.168.1.1 netmask
255.255.255.255 0 0
no fixup protocol pptp 1723
access-list outside_acl_inbound permit gre any host
yourpublicip
access-list outside_acl_inbound permit tcp any host
yourpublicip eq pptp
access-list outside_acl_inbound permit tcp any host
yourpublicip eq www
just out of curiosity, are emails coming into your MS
Exchange ?
I think you also need :
no fixup protocol smtp 25
access-list outside_acl_inbound permit tcp any host
yourpublicip eq smtp
And finally :
wr mem
This line :
static (inside,outside) yourpublicip 192.168.1.1 netmask
255.255.255.255 0 0
For yourpublicIP is this the static IP that was given by
my ISP or is it the IP dished out by the Cable modem to
the PIX firewall? I would assume that 192.168.1.1 should
be my sbs 2003 servers IP address here, correct?
Architecture of internet connection:
"Internet" <-> "Cable Modem" <-> "Cisco Pix
Firewall/Router" <-> "Sbs 2003 server"
Thanks,
JJ
|