OpenForum RSS: �� PIX ��

�� Pix �� outside (bmonk)

Thu, 14 Feb 2008 11:52:31 GMT

�� , �� SSh �� outside.
�� SSH
��

��

�� PIX �� (EDSKA)

Fri, 29 Apr 2005 10:19:53 GMT

>�� .... �� ....
>
>
>access-list outside_access_in; 4 elements
>access-list outside_access_in line 1 permit tcp 195.218.159.0 255.255.255.0 eq ssh host 195.218.236.178
>eq ssh (hitcnt=0)
>access-list outside_access_in line 2 permit tcp any host 192.168.0.8 eq ssh (hitcnt=0)
>
>access-list outside_access_in line 3 permit ip 195.218.159.0 255.255.255.0 host 195.218.236.178 (hitcnt=2)
>access-list outside_access_in line 4 permit ip 195.218.159.0 255.255.255.0 192.168.0.0 255.255.255.0 (hitcnt=0)

Ja ocen izveniajus no v pervom otvete dopustil osibku v access-liste ...

Access-list imejut osobennost srabotav pervomu ostalnije acl'i ne rassmatrivajutsia ...

Delaj tak :
1.
no access-list 110 permit ip 192.168.0.0 255.255.255.0 any
no access-list outside_access_in permit tcp 195.218.159.0 255.255.255.0 eq ssh host 195.218.236.178 eq ssh
no access-list outside_access_in permit tcp any host 192.168.0.8 eq ssh
no access-list outside_access_in

�� PIX �� (kirill_i)

Fri, 29 Apr 2005 10:05:36 GMT

��, �� , �� 3 (�� ssh), �� 3, � �� 1?

�� .... �� ....

access-list outside_access_in; 4 elements
access-list outside_access_in line 1 permit tcp 195.218.159.0 255.255.255.0 eq ssh host 195.218.236.178 eq ssh (hitcnt=0)
access-list outside_access_in line 2 permit tcp any host 192.168.0.8 eq ssh (hitcnt=0)
access-list outside_access_in line 3 permit ip 195.218.159.0 255.255.255.0 host 195.218.236.178 (hitcnt=2)
access-list outside_access_in line 4 permit ip 195.218.159.0 255.255.255.0 192.168.0.0 255.255.255.0 (hitcnt=0)

PIX Version 6.3(4)
interface ethernet0 10baset
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
hostname pix
domain-name local
clock timezone MSK/MSD 3
clock summer-time MSK/MDD recurring last Sun Mar 2:00 last Sun Oct 3:00
fixup protocol dns maximum-length 512
fixup protocol ftp 21
no f

�� PIX �� (EDSKA)

Fri, 29 Apr 2005 07:55:59 GMT

U tebia zadaca bila ssh na 192.168.0.10
a ti probrosil na: 192.168.0.8 !!!!

static (inside,outside) tcp 195.218.236.178 ssh 192.168.0.8 ssh netmask 255.255.255.255 0 0

Dobav ese
access-list outside_access_in permit ssh any host 195.218.236.178 eq ssh

I ti smotri idut li packeti po tvojemu ACL ili net ...
show access-list
hitcnt dolzen uvelicivatsia ...

�� PIX �� (kirill_i)

Fri, 29 Apr 2005 07:40:04 GMT

>no access-list outside_access_in permit ip 195.218.159.0 255.255.255.0 any
>access-list outside_access_in permit ip any 195.218.159.0 255.255.255.0

��, �� .

�� outside 195.218.236.178, � �� 195.218.159.0 - �� firewall
�� ..� �� ?

�� PIX �� (sh_)

Fri, 29 Apr 2005 07:33:51 GMT

no access-list outside_access_in permit ip 195.218.159.0 255.255.255.0 any
access-list outside_access_in permit ip any 195.218.159.0 255.255.255.0

�� PIX �� (kirill_i)

Fri, 29 Apr 2005 07:28:05 GMT

�� :(, �� ssh �� 195.218.236.178
�� ...
�� ?

PIX Version 6.3(4)
interface ethernet0 10baset
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
hostname pix
domain-name local
clock timezone MSK/MSD 3
clock summer-time MSK/MDD recurring last Sun Mar 2:00 last Sun Oct 3:00
fixup protocol dns maximum-length 512
fixup protocol ftp 21
no fixup protocol h323 h225 1720
no fixup protocol h323 ras 1718-1719
fixup protocol http 80
no fixup protocol rsh 514
no fixup protocol rtsp 554
no fixup protocol sip 5060
no fixup protocol sip udp 5060
no fixup protocol skinny 2000
fixup protocol smtp 25
no fixup protocol sqlnet 1521
no fixup protocol tftp 69
names
access-list 110 permit ip 192.168.0.0 255.255.255.0 any
access-list outside_access_in permit tcp any host 192.168.0.8 eq ssh
access-list outside_access_in permit ip 195.218.159.0 255.255.255.0 any
pager lines 36

�� PIX �� (EDSKA)

Thu, 28 Apr 2005 19:55:21 GMT

access-list 101 permit tcp any host 192.168.0.10 eq ssh
// ACL prikrepliajemij na outside interface, razresaet ssh obrasenije na 192.168.0.10
static (inside,outside) tcp 195.218.x.x ssh 192.168.0.10 ssh netmask 255.255.255.255 0 0
// Vikidivaem porti ssh’a IPishnika 192.168.0.10 (inside interface) naruzu.
access-group 101 in interface outside
// Ispolzujem ACL Nr. 101 na OUTSIDE interface

OpenForum RSS: ������ ����� PIX ������ ����

����������� � Pix �� outside (bmonk)

������ ����� PIX ������ ���� (EDSKA)

������ ����� PIX ������ ���� (kirill_i)

������ ����� PIX ������ ���� (EDSKA)

������ ����� PIX ������ ���� (kirill_i)

������ ����� PIX ������ ���� (sh_)

������ ����� PIX ������ ���� (kirill_i)

������ ����� PIX ������ ���� (EDSKA)

OpenForum RSS: �� PIX ��

�� Pix �� outside (bmonk)

�� PIX �� (EDSKA)

�� PIX �� (kirill_i)

�� PIX �� (EDSKA)

�� PIX �� (kirill_i)

�� PIX �� (sh_)

�� PIX �� (kirill_i)

�� PIX �� (EDSKA)