Исходное сообщение
"Помогите!!!! PIX 515 оргонизовать почтовик в DMZ" Отправлено o_key, 02-Май-08 13:17
Не могу пробросить 25 порт в DMZ вот конфиг - ПЛИЗ ХЕЛП уже не знаю что делать столько всего пробавал а ничего не выходит, посмотрите пожалуйсто где неправильно???? PIX Version 6.3(4) interface ethernet0 auto interface ethernet1 auto interface ethernet2 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 intf2 security4 enable password MAZHpu0paIjUNeAN encrypted passwd MAZHpu0paIjUNeAN encrypted hostname PIX515 domain-name AK-Cisco fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names name 192.168.1.100 admin access-list acl_outbound permit tcp host xxx.xxx.xxx.212 any eq smtp access-list acl_outbound deny tcp any any eq smtp access-list acl_outbound permit ip any any access-list 101 permit tcp any host 10.10.10.200 eq smtp pager lines 24 mtu outside 1400 mtu inside 1500 mtu intf2 1500 ip address outside xxx.xxx.xxx.210 255.255.255.224 ip address inside 192.168.1.1 255.255.255.0 ip address intf2 10.10.10.1 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm location 192.168.1.220 255.255.255.255 inside pdm location admin 255.255.255.255 inside pdm history enable arp timeout 14400 global (outside) 1 xxx.xxx.xxx.211 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 static (intf2,outside) 10.10.10.200 xxx.xxx.xxx.212 netmask 255.255.255.255 0 0 access-group 101 in interface outside access-group acl_outbound in interface intf2 route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.193 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ max-failed-attempts 3 aaa-server TACACS+ deadtime 10 aaa-server RADIUS protocol radius aaa-server RADIUS max-failed-attempts 3 aaa-server RADIUS deadtime 10 aaa-server LOCAL protocol local aaa authentication enable console LOCAL aaa authentication ssh console LOCAL aaa authorization command LOCAL http server enable http 192.168.1.220 255.255.255.255 inside http admin 255.255.255.255 inside no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable telnet timeout 5 ssh admin 255.255.255.255 inside ssh timeout 5 management-access inside console timeout 0 username root password idhYUMNmbaht7Bg3 encrypted privilege 15 privilege show level 0 command version privilege show level 0 command curpriv privilege show level 3 command pdm privilege show level 3 command blocks privilege show level 3 command ssh privilege configure level 3 command who privilege show level 3 command isakmp privilege show level 3 command ipsec privilege show level 3 command vpdn privilege show level 3 command local-host privilege show level 3 command interface privilege show level 3 command ip privilege configure level 3 command ping privilege show level 3 command uauth privilege configure level 5 mode enable command configure privilege show level 5 command running-config privilege show level 5 command privilege privilege show level 5 command clock privilege show level 5 command ntp privilege show level 5 mode configure command logging privilege show level 5 command fragment terminal width 80