PIX Version 6.3(5) interface ethernet0 auto interface ethernet1 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password encrypted passwd encrypted hostname qo-londongate domain-name mdigitalm.com clock timezone GMT 0 clock summer-time CDT recurring fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names access-list outbound_on_inside permit ip any any access-list nonat permit ip 10.100.10.0 255.255.255.0 10.200.0.0 255.255.0.0 access-list nonat permit ip 10.100.10.0 255.255.255.0 10.204.0.0 255.255.0.0 access-list nonat permit ip 10.100.10.0 255.255.255.0 192.168.10.0 255.255.255.0 access-list encrypt-acl permit ip 10.100.10.0 255.255.255.0 10.200.0.0 255.255.0.0 access-list encrypt-acl permit ip 10.100.10.0 255.255.255.0 10.204.0.0 255.255.0.0 access-list encrypt-acl permit ip 10.100.10.0 255.255.255.0 192.168.10.0 255.255.255.0 access-list inbound_on_outside permit ip any any pager lines 24 logging buffered debugging icmp permit any outside icmp permit any inside mtu outside 1500 mtu inside 1500 ip address outside 88.96.245.73 255.255.255.248 ip address inside 10.100.10.1 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm logging informational 100 pdm history enable arp timeout 14400 global (outside) 73 interface global (outside) 74 88.96.245.74 netmask 255.255.255.248 global (outside) 75 88.96.245.75 netmask 255.255.255.248 global (outside) 76 88.96.245.76 netmask 255.255.255.248 nat (inside) 74 10.100.10.0 255.255.255.0 0 0 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 access-group inbound_on_outside in interface outside access-group outbound_on_inside in interface inside route outside 0.0.0.0 0.0.0.0 88.96.245.78 1 timeout xlate 0:05:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout sip-disconnect 0:02:00 sip-invite 0:03:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ max-failed-attempts 3 aaa-server TACACS+ deadtime 10 aaa-server RADIUS protocol radius aaa-server RADIUS max-failed-attempts 3 aaa-server RADIUS deadtime 10 aaa-server LOCAL protocol local http server enable http 10.100.10.0 255.255.255.0 inside http 10.100.10.42 255.255.255.255 inside no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable sysopt connection permit-ipsec isakmp enable outside isakmp policy 10 authentication rsa-sig isakmp policy 10 encryption des isakmp policy 10 hash sha isakmp policy 10 group 1 isakmp policy 10 lifetime 86400 vpngroup neospire idle-time 1800 telnet timeout 5 ssh 10.204.0.0 255.255.0.0 inside ssh 10.100.10.0 255.255.255.0 inside ssh timeout 10 console timeout 0 terminal width 80 Cryptochecksum:2325e1ac8d8f30942e0ddd8a6a55283e qo-londongate(config)# sh xlate 8 in use, 141 most used PAT Global 88.96.245.74(1048) Local 10.100.10.42(1566) PAT Global 88.96.245.74(1043) Local 10.100.10.42(1559) PAT Global 88.96.245.74(1042) Local 10.100.10.42(1558) PAT Global 88.96.245.74(1045) Local 10.100.10.42(1561) PAT Global 88.96.245.74(1044) Local 10.100.10.42(1560) PAT Global 88.96.245.74(1047) Local 10.100.10.42(1563) PAT Global 88.96.245.74(1046) Local 10.100.10.42(1562) PAT Global 88.96.245.74(1025) Local 10.100.10.42(4863) qo-londongate(config)# qo-londongate(config)# sh conn 44 in use, 138 most used TCP out 82.34.146.117:53164 in 10.100.10.42:1586 idle 0:00:07 Bytes 0 flags saA TCP out 82.34.146.117:53164 in 10.100.10.42:1584 idle 0:00:08 Bytes 0 flags saA TCP out 80.42.60.135:29482 in 10.100.10.42:1568 idle 0:00:26 Bytes 0 flags saA TCP out 80.42.60.135:29482 in 10.100.10.42:1561 idle 0:00:28 Bytes 0 flags saA TCP out 81.233.65.62:65213 in 10.100.10.42:1558 idle 0:00:31 Bytes 0 flags saA TCP out 88.162.237.87:64248 in 10.100.10.42:1570 idle 0:00:26 Bytes 0 flags saA TCP out 88.162.237.87:64248 in 10.100.10.42:1563 idle 0:00:28 Bytes 0 flags saA TCP out 212.139.180.116:62520 in 10.100.10.42:1597 idle 0:00:02 Bytes 0 flags saA TCP out 212.139.180.116:62520 in 10.100.10.42:1599 idle 0:00:01 Bytes 0 flags saA TCP out 85.227.177.133:28723 in 10.100.10.42:1589 idle 0:00:04 Bytes 0 flags saA TCP out 85.227.177.133:28723 in 10.100.10.42:1594 idle 0:00:03 Bytes 0 flags saA UDP out 212.23.6.100:53 in 10.100.10.42:4863 idle 0:00:19 flags - TCP out 213.204.171.80:27136 in 10.100.10.42:1600 idle 0:00:00 Bytes 0 flags saA TCP out 82.34.146.117:443 in 10.100.10.42:1588 idle 0:00:05 Bytes 0 flags saA TCP out 88.222.181.32:58765 in 10.100.10.42:1583 idle 0:00:09 Bytes 0 flags saA TCP out 88.222.181.32:58765 in 10.100.10.42:1585 idle 0:00:07 Bytes 0 flags saA TCP out 82.34.146.117:80 in 10.100.10.42:1593 idle 0:00:03 Bytes 0 flags saA UDP out 212.23.6.100:53 in 10.100.10.42:1582 idle 0:00:07 flags - TCP out 86.20.139.2:43935 in 10.100.10.42:1571 idle 0:00:26 Bytes 0 flags saA TCP out 86.20.139.2:43935 in 10.100.10.42:1573 idle 0:00:24 Bytes 0 flags saA TCP out 84.64.150.44:51357 in 10.100.10.42:1592 idle 0:00:04 Bytes 0 flags saA Syslog logging: enabled Facility: 20 Timestamp logging: disabled Standby logging: disabled Console logging: disabled Monitor logging: disabled Buffer logging: level debugging, 261 messages logged Trap logging: disabled History logging: disabled Device ID: disabled translation from inside:10.100.10.42/1598 to outside:88.96.245.74/1079 302013: Built outbound TCP connection 336 for outside:85.197.149.204/443 (85.197.149.204/443) to inside:10.100.10.42/1598 (88.96.245.74/1079) 305011: Built dynamic TCP translation from inside:10.100.10.42/1599 to outside:88.96.245.74/1080 302013: Built outbound TCP connection 337 for outside:212.139.180.116/62520 (212.139.180.116/62520) to inside:10.100.10.42/1599 (88.96.245.74/1080) 305011: Built dynamic TCP translation from inside:10.100.10.42/1600 to outside:88.96.245.74/1081 302013: Built outbound TCP connection 338 for outside:213.204.171.80/27136 (213.204.171.80/27136) to inside:10.100.10.42/1600 (88.96.245.74/1081) 710005: UDP request discarded from 10.100.10.42/137 to inside:10.100.10.255/netbios-ns 305011: Built dynamic TCP translation from inside:10.100.10.42/1601 to outside:88.96.245.74/1082 302013: Built outbound TCP connection 339 for outside:85.197.149.204/80 (85.197.149.204/80) to inside:10.100.10.42/1601 (88.96.245.74/1082) 710005: UDP request discarded from 10.100.10.42/137 to inside:10.100.10.255/netbios-ns 305011: Built dynamic TCP translation from inside:10.100.10.42/1602 to outside:88.96.245.74/1083 302013: Built outbound TCP connection 340 for outside:85.24.189.25/1714 (85.24.189.25/1714) to inside:10.100.10.42/1602 (88.96.245.74/1083) 305011: Built dynamic TCP translation from inside:10.100.10.42/1603 to outside:88.96.245.74/1084 302013: Built outbound TCP connection 341 for outside:213.204.171.80/27136 (213.204.171.80/27136) to inside:10.100.10.42/1603 (88.96.245.74/1084)