唉PIX的老問(wèn)題...為什么都發(fā)生在我身上,求救.~!:(

sunshuang

http://72891.cn/viewthr ... page%3D1#pid5355322

在這個(gè)里面

sunshuang

看不到的,看這里.PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
nameif ethernet0 out security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pixfirewall
domain-name domain.com
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
pager lines 24
mtu out 1500
mtu inside 1500
mtu dmz 1500
ip address out 222.57.98.154 255.255.255.0
ip address inside 192.1.1.1 255.255.255.0
ip address dmz 192.1.2.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
global (out) 1 interface
global (dmz) 1 192.1.2.50-192.1.2.250
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (dmz) 1 192.1.2.3 255.255.255.255 0 0
static (dmz,out) tcp 222.57.98.154 www 192.1.2.3 www netmask 255.255.255.255 0 0

static (dmz,out) tcp 222.57.98.154 pcanywhere-data 192.1.2.3 pcanywhere-data net
mask 255.255.255.255 0 0
static (dmz,out) tcp 222.57.98.154 241 192.1.2.3 241 netmask 255.255.255.255 0 0

static (dmz,out) tcp 222.57.98.154 ftp 192.1.2.3 ftp netmask 255.255.255.255 0 0

static (dmz,out) tcp 222.57.98.154 13000 192.1.2.3 13000 netmask 255.255.255.255
0 0
static (dmz,out) tcp 222.57.98.154 14000 192.1.2.3 14000 netmask 255.255.255.255
0 0
static (dmz,out) tcp 222.57.98.154 15000 192.1.2.3 15000 netmask 255.255.255.255
0 0
static (dmz,out) udp 222.57.98.154 15000 192.1.2.3 15000 netmask 255.255.255.255
0 0
static (dmz,out) udp 222.57.98.154 14000 192.1.2.3 14000 netmask 255.255.255.255
0 0
static (dmz,out) udp 222.57.98.154 13000 192.1.2.3 13000 netmask 255.255.255.255
0 0
static (dmz,out) 222.57.98.154 192.1.2.3 netmask 255.255.255.255 0 0
conduit permit icmp any any
conduit permit ip any any
route dmz 0.0.0.0 0.0.0.0 222.57.98.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet 192.1.1.0 255.255.255.0 inside
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 out
ssh timeout 5
console timeout 0
terminal width 80
Cryptochecksum:9e01e520a745d21cba7051bbd3b728b3

: end
pixfirewall#

sunshuang

DMZ的服務(wù)器.可以PING通.外網(wǎng)網(wǎng)關(guān).可是打不開網(wǎng)頁(yè).

INSIDE的用戶不能訪問(wèn),DMZ的服務(wù)器.????
為什么?為什么?我是哪里錯(cuò)了呀.555555555555555555555


求大家?guī)蛶蛶蛶蛶蛶蛶蛶蛶蛶蛶蛶兔?....................


唉.真不知道我上輩子做錯(cuò)了什么.

Devil_xl

幫不上你什么忙了,這東西搞的不多........

ravenhua

global (dmz) 1 192.1.2.50-192.1.2.250 是否有問(wèn)題？
192.1.2.0/24是內(nèi)網(wǎng)地址，把這句去掉試試。

sunshuang

呵呵.