Server Internet Access
Posted on 2011-03-04
I have a server running a web application on port 8080. My boss wanted it easier for customers to not have to put in the :8080 so I put in the following static NAT statements in my firewall (PIX 515 version 7.22)
static (dmz1,outside) tcp xxx.xxx.xxx.xxx www 192.168.1.54 8080 netmask 255.255.255.255
statiic (dmz1,outside) tcp xxx.xxx.xxx.xxx https 192.168.1.54 https netmask 255.255.255.255
static (dmz1,outside) tcp xxx.xxx.xxx.xxx 3389 192.168.1.54 3389 netmask 255.255.255.255
static (dmz1,outside) tcp xxx.xxx.xxx.xxx 6000 192.168.1.6000 netmask 255.255.255.255
Exerything has been working great, for quite some time, until someone tried to access the internet from the server and it isn't getting past my firewall. Packet trace shows there is no NAT translation.
Not a big deal right now but am I missing something?
ACLs are OK.