Re: [fw-wiz] PIX and IIS issue
From: Mohammad Shahed Akhtar (msakhtar_at_kfupm.edu.sa)
To: "Ames, Neil" <NAmes@anteon.com>, <email@example.com> Date: Thu, 1 May 2003 23:01:09 +0300
Yes the web server on the Linux box works fine, with no changes to the PIX
and yes the IIS box doesnot.
I'll check the all assigned option and let you knowthat.
Thanks for the help
----- Original Message -----
From: "Ames, Neil" <NAmes@anteon.com>
To: "Mohammad Shahed Akhtar" <firstname.lastname@example.org>;
Sent: Thursday, May 01, 2003 5:17 PM
Subject: RE: [fw-wiz] PIX and IIS issue
> Are you saying that your Web server on the Linux box works fine, with no
changes to the PIX, where the Windows IIS server doesn't (using the same
IP)? Is the IIS server configured to use an IP address other than "All
Assigned" (in the Web site properties)? Just a guess, but you may have some
other IP address configured there (if I read this right)...
> -----Original Message-----
> From: Mohammad Shahed Akhtar [mailto:email@example.com]
> Sent: Wednesday, April 30, 2003 6:27 PM
> To: firstname.lastname@example.org
> Subject: [fw-wiz] PIX and IIS issue
> I have a PIX connected to a switch on internal network and therein resides
> my Microsoft IIS box. I can access ftp, ping etc from outside through
> conduit and/or access lists but I cannot access http port from outside ?
> Tried all clears - conduit, xlate, arp etc without any effect. Finally
> thought that its nothing to do with the poor PIX and worked on the web
> server. Replaced the IIS box with Linux and lo! it works fine.. I mean all
> access lists and/or conduits for http, ftp, ping work fine. Now why
> the same work with Microsoft IIS? The same Microsoft IIS works great with
> all ports accessible on the internal network but inbound access for http
> port from across the firewall through the outside interface is not
> Any thoughts as to what's the issue? Is there a bug here?
> Will virtual + aaa combo help here ?
> BTW: PIX version 6.1(4) and IIS version 5.0+
> Thanks in advance,
> firewall-wizards mailing list
firewall-wizards mailing list