i have tested it again on 6.1.1 without problems. ok, i have used other
internal ports.

Yahoo wrote:

> Hi Drik
>
> Static command worked for the following port.
>
> static (inside,outside) tcp 172.16.0.2 www 10.0.0.2 www  netmask
> 255.255.255.255

as you wrote i think, it's running for 172.16.0.2/80. right?

> but for some reason it is not working when configured for
>
> static (inside,outside) tcp 172.16.0.3 www 10.0.0.2  8080  netmask
> 255.255.255.255

mmh. i believe, it could be:

- you didn't configure a service on 10.0.0.2/8080. what does a telnet from
outside and localhost say or a "netstat -an"?
- proxy arp at outside interface of firewall is disabled.
- an acl for this connection is missing.

i believe, you are still making a mistake. do you really enable logging? switch
it to level debug.
do you can see the incoming connection "sho conn" or the translation "sho
xlate" at firewall?

dirk






--
energis-ISION
Dirk Pfau
IP Network / iSecurity
Harburger Schlossstr. 1
D-21079 Hamburg

Fon: +49 40 77175-538

eMail: [EMAIL PROTECTED]
Web: http://www.energis-ision.com



_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to