
PIX Version 6.3(5)
3 y4 M5 u. b% @5 L0 _# tinterface ethernet0 auto
6 k8 e# q0 y7 finterface ethernet1 auto
) Z7 y/ y2 U$ d& X b2 Z2 v# s# Hnameif ethernet0 outside security0
8 r, a! u& @7 ?nameif ethernet1 inside security100
( \8 ]4 L. q+ c$ M9 _$ _$ l9 Z Yenable password bC9eqE.KH6cr1L6d encrypted
! L" ^5 ?, ~" I. A; v) T* A" W1 Cpasswd bC9eqE.KH6cr1L6d encrypted
# `9 D& }( [( K) Q. _3 @hostname xzzx
! Z z0 F) O5 qfixup protocol dns maximum-length 512' |/ i) _3 [, R: Y/ B* U- N
fixup protocol ftp 21# i4 _( y0 p8 i$ e) S% q4 ?! N
fixup protocol h323 h225 1720
, l+ x( d+ M$ z! h: d' ^fixup protocol h323 ras 1718-1719
! ~/ K# }# e" D3 Sfixup protocol http 80+ A: @& L* d, i+ R2 f, ^
fixup protocol rsh 514
, ]# O. l" z% x" a# Ufixup protocol rtsp 554) H$ w$ ?. y) t! x& a4 H/ A/ J
fixup protocol sip 5060" S: H6 i5 ~; V* a
fixup protocol sip udp 5060. L* Q' Z) O3 w# k- B& O6 D% p
fixup protocol skinny 2000
2 B6 |0 ^$ d" a6 d- Kfixup protocol smtp 250 m% b( K1 J3 k
fixup protocol sqlnet 1521
! ^2 c5 x; j. S/ ffixup protocol tftp 69
: ?3 t$ l& b! B8 K* [names
# ^ }9 g' d( E, x9 {. L) n% ]8 S- L$ j
access-list 130 deny udp any any eq 1434
4 i: P8 S% c' r2 F0 naccess-list 130 deny ip host 192.168.91.9 any
p* C! o& N6 |, ~access-list 130 deny ip host 192.168.91.10 any
8 v* o3 e e4 ?access-list 130 deny ip host 192.168.91.11 any
V# ]8 n7 f4 M. Laccess-list 130 deny ip host 192.168.91.12 any
5 `$ z, L. K; Q7 [7 J0 iaccess-list 130 deny ip host 192.168.91.13 any
- H( Z, x7 u) Q" r N. Haccess-list 130 deny ip host 192.168.91.14 any ; U0 d5 O" L P
access-list 130 deny ip host 192.168.91.15 any " B( T# N) u' h
access-list 130 deny ip host 192.168.93.21 any 1 v3 N+ r* C2 v7 b( n+ h3 D% u& g
access-list 130 deny ip host 192.168.93.22 any ! B7 I. t+ p; G" x
access-list 130 deny ip host 192.168.93.23 any
7 ^6 A) o+ q; N1 |( D3 e4 T8 ?access-list 130 deny ip host 192.168.93.24 any
( G' x5 e' E' }8 s* \1 Uaccess-list 130 deny ip host 192.168.93.25 any
- s+ v7 U) ^ s6 ^( `3 ?% Maccess-list 130 deny ip host 192.168.93.26 any 4 ~8 V% O5 v8 F: M2 q
access-list 130 deny ip host 192.168.93.27 any 1 L; c9 X, `" U; t
access-list 130 deny ip host 192.168.93.28 any 1 D" H. S% @$ A7 _8 b! i# z
access-list 130 deny ip host 192.168.93.29 any ; @8 K9 M6 k* J( F7 u" D
access-list 130 deny ip host 192.168.93.30 any
$ _) H- d/ J' w {* P3 O1 Raccess-list 130 deny ip host 192.168.93.31 any 2 N$ g0 z1 Z- R% o7 t0 ]# Q: \1 n2 p
access-list 130 permit ip 192.168.91.0 255.255.255.240 any
0 ]+ ^( t9 r* H" F. Zaccess-list 130 permit ip 192.168.92.0 255.255.255.240 any
d, G5 G) ?* b1 x0 d+ Xaccess-list 130 permit ip 192.168.95.0 255.255.255.224 any 5 Y6 W$ Q7 ]0 f3 O. n4 J$ A7 D& c6 o
access-list 130 permit ip 192.168.99.0 255.255.255.224 any
" F; Y: L% b: O- h+ ~0 V, eaccess-list 130 permit ip 192.168.100.0 255.255.255.224 any
/ D! {+ } _; D' P/ ?
. k; [0 y( H6 B1 V5 l$ Taccess-list 130 permit ip 192.168.93.0 255.255.255.224 any
2 S r5 S1 } C- {: Hpager lines 24
* T+ m9 S1 `( C( Amtu outside 1500
2 s$ _7 U. T! ~# lmtu inside 15000 p/ j+ c) K9 M: l
ip address outside ***.**.28.74 255.255.255.248
( P4 ^- k7 n. p2 W+ ?; g* J2 j' Q4 Kip address inside 192.168.100.1 255.255.255.0; n2 O/ `3 s' J( E& Y
ip audit info action reset
% P7 @6 l) ]: b I" Q( [ip audit attack action reset
$ a1 I! P& Y1 o" P L! C3 q( s- @no failover2 B: J* D6 w7 R
failover timeout 0:00:00% g! f* w4 ?0 P( l n
failover poll 15
6 \# h3 O) t! H4 x, S9 Bno failover ip address outside1 j( m% Q" h \ o% S0 G5 b# w! F! `0 J
no failover ip address inside% M; Z2 x* p5 @. G& R
pdm history enable
J2 e8 j* J. ~arp timeout 14400" D9 \5 x6 B4 x3 ~- i
global (outside) 1 interface9 `$ P* R* A% ~4 f' x2 B( O* u
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
$ d3 c) V/ b% i- ^static (inside,outside) tcp ***.**.28.76 www 192.168.99.9 www netmask 255.255.255.255 0 0
3 \8 i! k3 n6 e/ \4 Z2 }
% G$ w( q/ \' a. M! Zaccess-group 130 in interface inside) T& A* _* @1 N) ]$ k
conduit permit icmp any any 3 n( j: L( Q- E3 H- P+ h
conduit permit tcp host ***.**.28.76 eq www any
6 ~* m/ T7 R, {6 u1 s0 E: o0 \' q7 O C8 n) m
route outside 0.0.0.0 0.0.0.0 ***.**.28.73 1' h2 u1 r- Q; s9 V: s; b( E" G7 d
route inside 0.0.0.0 0.0.0.0 192.168.100.2 2 |
|