• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 331
  • Last Modified:

Web server hosting the port 80 redirection cannot access itself

Port 80 on the external address of our Pix 501 (68.179.x.y) is redirected to our internal Web Server at  ip address 10.200.6.25. Everyone can access the web site properly, internal as well as external clients. Except from the Web server itself. If I go to address 68.179.x.y in IE from the web server itself, I get Page Cannot be displayed.

Is this a normal Cisco Pix behaviour preventing a redirected host to access itself from the external interface, or is it a misconfiguration on our part ?
0
ndidomenico
Asked:
ndidomenico
1 Solution
 
nodiscoCommented:
No its quite normal.  The PIX won't let traffic go back in the interface it originates from - the originating traffic is going out the PIX outside ip as thats where the address is but needs to come back in as its port-forwarded internally.

won't work.

If you want a quick workaround - put a DNS A record for the URL name - e.g. www.mycompany.com to the 10.200.6.25 address on your DNS server - or even just create an entry for this in the hosts file
0
 
ndidomenicoAuthor Commented:
What is the security or technical reason for the Pix to block this form of out/in traffic ? This Pix is replacing a low-end Linksys router which was not blocking this sort of traffic.

For the workaround, I'm afraid it won't work in this case. Displaying the web page we need is done by first going to another web page on the Internet, which has a link that brings us to our web page, except that the link on that site is using an IP address (the external ip of the Pix) instead of a url name. Can we get arout this without having to modify this external web page ?
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Tackle projects and never again get stuck behind a technical roadblock.
Join Now