cisco pix: inside host being blocked at "outside"

Archived from groups: comp.security.firewalls (More info?)

Hello,

Im using a 515E and now and then cannot access specific machines. All on the
same subnet 255.255.240.0 and for example sometimes I cannot resolve domain
names, or access a www port on a specific machine

I check the fw logs and it will show something like:
17:40:18: %PIX-4-106023: Deny tcp src outside:www1/80 dst inside:johnws/3579
by access-group "outside_access_in"

after a few minutes I can again resolve domain names or access the ww server
which I was unable to connect to previously

www1 and machine johnws are both on the same ip range with subnet
255.255.240.0

How come does the firewall sometimes block access and how come is particular
INSIDE traffic coming as source from outside?


--

Regards,
Tony Da Silva
IDWS Sales
sales@idws.com
Tel: (011)477-0135
Fax: (086)6140 719



----------------------------------------------------------------------------
--------------------------------------------------------
The views expressed in this email are, unless otherwise stated, those of the
author and not
those of IDWS or its management. The information in this e-mail is
confidential and is
intended solely for the addressee. Access to this e-mail by anyone else is
unauthorised.

If you are not the intended recipient you are hereby notified that any
disclosure, copying,
distribution or taking action in reliance of the contents of this
information is strictly
prohibited and may be unlawful. IDWS is liable neither for the proper,
complete
transmission of the information contained in this communication, nor for any
delay in its
receipt, nor for the assurance that the information is correct and virus
free.