Cisco PIX DMZ Configuration
Guys, I'm at a loss. I have tried everything I could think of and find posted to merely connect a server in my DMZ to the outside world.
What I want to do is to be able to Remote Desktop into a box in the DMZ.
Here is my configuration. (real external ip changed)
PIX Version 6.3(5)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
access-list out permit tcp any host 220.127.116.11 eq 3389
ip address outside 1.1.1.x 255.255.255.192
ip address inside 10.1.0.1 255.255.0.0
ip address dmz 172.16.1.1 255.255.255.0
global (outside) 1 1.1.1.x
global (outside) 1 interface
nat (inside) 0 access-list 100
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (dmz,outside) 18.104.22.168 172.16.1.56 netmask 255.255.255.255 0 0
access-group out in interface outside
I get hit counts on the 3389 access-list entry but the traffic never seems to actually hit the statically mapped server sitting on 172.16.1.56
Other statically mapped servers from inside,outside work just fine. This is my only server in the dmz but I can't get it to respond.
Any ideas? To me the configuration looks correct but its just not working.