Solved

pix acl

Posted on 2004-10-12
1
421 Views
Last Modified: 2013-11-16
i would like an external dns server from communicate with a to a internal dns server. on th pix 6.2.2 what would i need to do?
access-list 110 permit tcp host realip host 172.16.1.34 eq 56

hat are some commands to see if acls are working
0
Comment
Question by:cogit
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 275 total points
Comment Utility
DNS does not use port 56, unless you have something special.

The syntax is:
  access-list 110 permit tcp host <external server ip> host <global IP> eq 53
  access-list 110 permit udp host <external server ip> host <global IP> eq 53

You would have to post your complete config for me to be more specific for you.

Any time you chang the acl, you have to re-apply it to the interface:
   access-group 110 in interface outside

To check it, use "show access-list" and look for (hitcount= )
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

This is about downgrading PIX Version 8.0(4) & ASDM 6.1(5) to PIX 7.2(4) and ASDM 5.2(4) but with only 64MB RAM and 16MB flash. Background: You have a Cisco Pix 515E which was running on PIX 7.2(4) and its supporting ASDM 5.2(4) without any i…
I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now