
PIX Version 6.3(5)
; D) G4 u+ Q/ c& p7 o0 X7 C" ?interface ethernet0 auto
& t" \7 g: @' B) o# C1 `8 W9 hinterface ethernet1 auto8 {" b& e( F l7 T; x' b' }$ m4 `: S
nameif ethernet0 outside security0
+ ^; `2 f% M, }nameif ethernet1 inside security1003 i! h2 Q7 D6 a
enable password bC9eqE.KH6cr1L6d encrypted8 ^# D( u" v3 I) s
passwd bC9eqE.KH6cr1L6d encrypted
7 g# {# u. h5 M+ K% z3 Zhostname xzzx
- \. m! k( n& K) {$ ?# [fixup protocol dns maximum-length 512
* R, `3 I* Z( O! g& hfixup protocol ftp 21; Z( H& v Y$ W# C; b
fixup protocol h323 h225 1720- a; k) j5 E4 P) F- T9 I5 K# b
fixup protocol h323 ras 1718-1719* s( Y- a1 q% @6 x8 k
fixup protocol http 80. ]$ e( W' _! Y& n
fixup protocol rsh 514
t7 ?: o$ B1 Z" g4 k- bfixup protocol rtsp 554
% h# v) H0 X* l4 ~3 ~1 jfixup protocol sip 5060
8 u/ {( W( Y$ W: L* ~fixup protocol sip udp 5060
! O# p# J. s: v; ]0 z7 J6 T/ G7 b/ }fixup protocol skinny 2000
9 M! s: O( H, ~fixup protocol smtp 25+ E% U3 V) ^: j3 C6 s, i, K1 H
fixup protocol sqlnet 1521
) i7 [+ _# W# l- w" G, w' nfixup protocol tftp 69
6 A& G# r! a- g+ | `7 Bnames
7 t# f. y- d, h$ L3 Y) k( n
1 Y/ G8 Y& \: x! c; J5 Laccess-list 130 deny udp any any eq 1434 0 g3 {, [* j2 D2 C7 v
access-list 130 deny ip host 192.168.91.9 any
- x8 ^6 U: r: t3 ?* gaccess-list 130 deny ip host 192.168.91.10 any # o& x% U" Z, j, @- b, ^$ s/ W
access-list 130 deny ip host 192.168.91.11 any e6 c" E( g3 ]5 v
access-list 130 deny ip host 192.168.91.12 any
$ z4 q8 e6 j; D, M$ haccess-list 130 deny ip host 192.168.91.13 any
' v. i9 d G T9 i' Laccess-list 130 deny ip host 192.168.91.14 any + w, M# P/ |$ |# P) w4 o+ _
access-list 130 deny ip host 192.168.91.15 any # t4 ~ x# X/ K
access-list 130 deny ip host 192.168.93.21 any & m# O# b* P% I* z
access-list 130 deny ip host 192.168.93.22 any 9 a: a+ }! D' o+ x8 K3 s# @5 z# ?" {
access-list 130 deny ip host 192.168.93.23 any
c. t p+ l+ }& u4 S) vaccess-list 130 deny ip host 192.168.93.24 any
, j6 \4 h& @8 w, A) Baccess-list 130 deny ip host 192.168.93.25 any
0 t" q, L7 {: i# caccess-list 130 deny ip host 192.168.93.26 any
& ?$ D" z+ O) A1 H/ G) B8 @( G* Laccess-list 130 deny ip host 192.168.93.27 any ) O! r$ Z2 ?% ]
access-list 130 deny ip host 192.168.93.28 any , N) b8 M0 n9 W# o
access-list 130 deny ip host 192.168.93.29 any 9 N$ W9 q* X- A$ s
access-list 130 deny ip host 192.168.93.30 any ( k9 @+ W; N6 D) i/ e
access-list 130 deny ip host 192.168.93.31 any
5 D) z& b4 ]9 m$ b+ m1 `# I daccess-list 130 permit ip 192.168.91.0 255.255.255.240 any
8 y( V7 `8 f$ w# G* _5 N* Maccess-list 130 permit ip 192.168.92.0 255.255.255.240 any # q6 h/ w7 M; Y0 t$ g
access-list 130 permit ip 192.168.95.0 255.255.255.224 any
/ s* H7 m( p, }; J5 [8 Eaccess-list 130 permit ip 192.168.99.0 255.255.255.224 any ' V1 B1 g1 V* i& e
access-list 130 permit ip 192.168.100.0 255.255.255.224 any * f4 R8 p3 G7 @+ V8 H9 b" Z$ A
% r' a7 E" {$ [" {" t; Z
access-list 130 permit ip 192.168.93.0 255.255.255.224 any & C6 A( Y' a5 d4 D8 o, ^
pager lines 24
8 {. Q8 _9 I( n8 R( v4 E8 |& cmtu outside 1500
: W4 ?- `% U8 S9 rmtu inside 1500: q, ^8 E! i- V7 {
ip address outside ***.**.28.74 255.255.255.248
( _8 k/ I& ~( ?" C) Zip address inside 192.168.100.1 255.255.255.0
+ l0 `9 g+ f6 z1 r# Vip audit info action reset" F2 T9 K. R; k ?6 H/ p
ip audit attack action reset
; A# y& @- F4 A* Lno failover( t2 Z- B2 l5 O6 ^
failover timeout 0:00:00
# K9 R* O+ I a7 m6 G( N) w0 jfailover poll 15! U& q6 } `& [- b6 O
no failover ip address outside
; f; H) L4 d" U( p- ]! }! qno failover ip address inside
* |8 f, J& n, d3 g5 F5 Hpdm history enable
: m \; w; p' T- {' n Z& marp timeout 144001 G1 h) h8 \" }$ j% V+ I* h
global (outside) 1 interface3 Z, S$ L6 c* q3 h$ s! A
nat (inside) 1 0.0.0.0 0.0.0.0 0 0. |* F7 j4 _* k4 \9 T: i1 L0 A4 w' G
static (inside,outside) tcp ***.**.28.76 www 192.168.99.9 www netmask 255.255.255.255 0 0
" }0 }& P3 h* Z$ d' b: E2 w0 Z) j, [& ]# w% x
access-group 130 in interface inside9 @5 Q9 j1 O- a7 S) B X5 i+ K
conduit permit icmp any any j0 D; i, U. a* L
conduit permit tcp host ***.**.28.76 eq www any ( F4 e5 t3 y# l" T* ^/ j
8 ~/ _+ G$ e$ a* G: M* O2 m' I, a
route outside 0.0.0.0 0.0.0.0 ***.**.28.73 1
) P; x+ q( M2 }5 proute inside 0.0.0.0 0.0.0.0 192.168.100.2 2 |
|