setting up services to be accessible through the internet

socfocus.com — Thu, 25 Oct 2012 02:01:46 GMT

I am wanting to have one of my internal machines be a webserver and be allowed to talk out through the internet.

Not sure how to go about doing this.

Re: setting up services to be accessible through the internet

gswcowboy — Thu, 25 Oct 2012 05:12:33 GMT

Let's say your server is in the trust zone.

Nat Policy (destination nat)

from L3_Untrust;

source any;

to L3_Untrust;

to-interface ;

destination 199.3.215.103; <== Public IP of your server

service tcp/any/any;

translate-to "dst: 172.16.20.7";

Sec Policy

from L3_Untrust;

source any;

source-region any;

to L3_Trust;

destination 199.3.215.103; <== Public IP of your server

destination-region any;

user any;

category any;

application/service[ ssl/any/any/any web-browsing/any/any/any ];

action allow;