Re: pix6.3 logging

sillymartin@xxxxxxxxx wrote:
you are right, the server's internal ip adress had been changed,
still,
when I did sh x-late this came up:

pix# sho xlate | grep 192.168.191.101
Global 1.2.5.5 Local 192.168.191.101

(this external adress was never mapped to the internal host, afaik it
is not even a server that's alive also it doesn't appear in the Pix
config anywhere else)

and after clear xlate (and one ssh connect) it showed correctly:

pix(config)# sho xlate | grep 192.168.191.101
Global 1.2.3.4 Local 192.168.191.101

so where did Pix get that 1.2.5.5 adress from?

thanks again


check your NAT and static config. sho glob, sho nat, and sho static.

the outbound connection may pick up a global address from the pool and
keep it but you may think you have it statically mapped. although a
"static" translation should take precedence for inbound and outbound.
.