Port Forwarding

[colinT23]

Hi Guys,

I'm setting up a Windows Small Business Server at home and need to forward several ports to the external NIC of my server. I currently have a Cisco PIX 501 with a basic config. I need to forward ports 25, 443, 444, 4125 and 1723 to my SBS external NIC at 192.168.1.2 (PIX internal IP is 192.168.1.1). Could someone give me the commands to accomplish this and also, do I need to alter the 'Fixup SMTP' command ? TIA for any help you can give.

Regards Colin.

 

[Supergrrover]

here you go

access-list outside_in permit tcp any host [ExternalIP] eq 443
access-list outside_in permit tcp any host [ExternalIP] eq 444
access-list outside_in permit tcp any host [ExternalIP] eq 25
access-list outside_in permit tcp any host [ExternalIP] eq 4125
access-list outside_in permit tcp any host [ExternalIP] eq 1723

access-group outside_in in interface outside

to allow the traffic
and

static (inside,outside) [ExternalIP] [InternalIP] netmask 255.255.255.255

(for all traffic to go here - not ok if you are using PAT)

or

static (inside,outside) tcp [ExternalIP] 443 [InternalIP] 443 mask 255.255.255.255
static (inside,outside) tcp [ExternalIP] 444 [InternalIP] 443 mask 255.255.255.255
static (inside,outside) tcp [ExternalIP] 25 [InternalIP] 443 mask 255.255.255.255
static (inside,outside) tcp [ExternalIP] 4125 [InternalIP] 443 mask 255.255.255.255
static (inside,outside) tcp [ExternalIP] 1723 [InternalIP] 443 mask 255.255.255.255

( so only those ports go to the server - use this for PAT)



Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[colinT23]

Hi Brent,

You are a star sir! Many thanks for your help.

Regards Colin.

 

[Supergrrover]

glad it worked


Brent
Systems Engineer / Consultant
CCNP, CCSP