Big thanks to anyone that can help with this:
I have the following situations:
A load-balancing router performing NAT from a public interface to a private one (172.27.0.0). It has a translation from x.x.x.x to 172.27.0.12.
Behind this is a server and a few PC's. A A cisco asa doing transparent firewalling is also present between the switch and one server (172.27.0.12)
The server is on the same subnet and is seperated from the LAn with the cisco.
The aim is to be able to access the web server publically and from the lan.
Currently I have an 'allow ip any any' on both interfaces.
I can access the web server from 172.27.0.x without problems, but when I try to access it externally, it does not connect.
A 'show conn' sees the attempted connection with a flag of SaAB - suggesting a problem with the syn/ack bit.
Any clues?
