Recent content by OHSR

smikes, its not a problem until DNS resolves the name for email, everything else i can use the real ip. The new email sever is sending to mydomain.com (existing old email server), DNS points to the old mail server's public IP and sending the message to the address times out.

Antotech: Sorry we must have posted at the same time, and i missed your last post. You are say setup a physical DMZ. There is a perimeter router in place, but it is only sending traffic to the PIX, doing nothing more. I'll look into it. its in the coperate office and i work remotely. so ill...

thanks for the help anyways! Smikes (or anyone else for that matter)... if you see this, do you have any thoughts on how to get this to work out?

Not that i true care... but i did snip and changed Public ips, internals are actuals: Cisco PIX Firewall Version 6.2(2) Cisco PIX Device Manager Version 2.0(2) Compiled on Fri 07-Jun-02 17:49 by morlee becker up 2 days 2 hours Hardware: PIX-515, 32 MB RAM, CPU Pentium 200 MHz Flash...

but by using the accesslist (seebelow)this will still not allow access betweenthe internal server for using public ips. it should just open it wide open throguh the PIX correct? Applied using addressing in first post: access-list 101 permit tcp any host 63.63.63.183 access-group 101 in...

smikes??? got any thought?

Thanks for the help. as for the access-list. its not in use. it was for a VPN no longer existant

for the sake of the company i change the listed ip in the access-list i posted before. no access groups setup. we have plenty of extra public ips so i just NAT one to the new server. if it is not possible to hit the public ips using a PIX as smikes stated, then im out of luck here im guessing...

So what other options do i have here. It's not a huge security risk, the new box is simple a xnix apache webserver/postfix mail server, doesnt need to be behind firewall in my opinion. But this is the other way i know of getting it out, since all inet traffic is running throguh pix. any thoughts?

Access-list: access-list 110 permit ip host 63.63.63.178 10.240.0.0 255.248.0.0

Also, I already tried conduit permit icmp any any just trying to get a ping through.

its not so much the icmp traffic im worried about, basically im trying to settup another email server for tech users, but it is unable to send to the existing mail server, because of this.

Hey all, This is my first post on this forum, so please go easy. My questions is im guessing related to the NATs setup on the PIX (PIX515). I'm sure this is simple, but I cannot ping they other outside (internet) IPs of other servers in our organization. They all have static setups with their...