On Thu, 14 Apr 2005, Justin Krejci wrote: >> static (inside,outside) your.public.ip webserver.private.ip netmask \ >> 255.255.255.255 0 0 >> conduit permit tcp host your.public.ip eq www any >> > > This syntax is correct, though you should use ACLs instead of conduits as > Cisco has decided to phase out conduit support eventually. Plus, whats up > with the switched "to" and "from" order in conduits? It's a conspiracy by The Cabal to confuse the masses. CONDUIT is an anagram of "TINC duo", obviously referring to Sandy Lerner and Leonard Bosack, the cisco "duo". There Is No Cabal, Adam