pix acl

i would like an external dns server from communicate with a to a internal dns server. on th pix 6.2.2 what would i need to do?
access-list 110 permit tcp host realip host 172.16.1.34 eq 56

hat are some commands to see if acls are working
cogitAsked:
Who is Participating?
 
lrmooreConnect With a Mentor Commented:
DNS does not use port 56, unless you have something special.

The syntax is:
  access-list 110 permit tcp host <external server ip> host <global IP> eq 53
  access-list 110 permit udp host <external server ip> host <global IP> eq 53

You would have to post your complete config for me to be more specific for you.

Any time you chang the acl, you have to re-apply it to the interface:
   access-group 110 in interface outside

To check it, use "show access-list" and look for (hitcount= )
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.