Port redirection with pix

Hi, I am trying set up port forwarding on a PIX 515 running version 6.3 (3) and nowhere fast.

The idea is to redirect the traffic from port 25 to port 2525 and the static command, I tried is as follows:-

static (inside, outside) tcp 25 X.X.X.X Y.Y.Y.Y 2525 netmask 255.255.255.255 0 100

Where X.X.X.X is a public address and Y.Y.Y.Y is a private address.

Also, I added a line of the access list to port 25 for incoming host X.X.X.X.

The redirect does not work. I even went as far as the test on a web server, forwarding port 80 to 8080, but traffic is sent to port 80, regardless of the static command.

Can someone please tell me what I'm doing wrong? My understanding is that the port redirects were possible with the later pix 6.0 or version software.

Thanks in advance,

Rick

No sweat. I almost always overlook the simplest things so when someone else has a problem, I start easy and move up. Usually solves the problem more quickly.

As for your other question, Yes, it is normal. Remember that static is bi-directional translations. Thus, when you added the port information in the static command to the SMTP server, the PIX only knows now to translate packets from TCP/2525 (I think that's how you had it). When your mail server tries to send outgoing mail, the source port will be an ephemeral port (IE not 2525 probably). So, I usually people do something like this:

static (inside, outside) tcp 1.1.1.1 25 10.1.1.1 2525 netmask 255.255.255.255

NAT (inside) 2 10.1.1.1 255.255.255.255

Global 2 1.1.1.1 (outside)

It takes care of everything in both directions of the 10.1.1.1 host (for example).

Hope that this helps explain the issues. Good luck.

Scott

Tags: Cisco Security

Similar Questions

  • Port forwarding with PIX 501

    I try to get my PIX 501 to forward traffic on port 1412 with TCP and UDP to use Direct Connect, and the problem I have is I can connect to a DC hub, but cannot establish connections with users.

    I added the following to the default configuration from the factory with a partial success:

    outside access list permit tcp any host 192.168.100.20 eq 1412

    access-list outside permit udp any host 192.168.100.20 eq 1412

    public static tcp (indoor, outdoor) interface 1412 192.168.100.20 1412 netmask 255.255.255.255 0 0

    public static tcp (indoor, outdoor) interface 1412 192.168.100.20 1412 netmask 255.255.255.255 0 0

    In the debug log set to the access list I rule this type of errors:

    Deny tcp src outside other.users.ip.addr/3099 dst within the my.public.ip.addr/1412 by access-group "access_outside_in".

    TCP request discarded outside my.public.ip.addr/45961 other.users.ip.addr/2362

    I'm quite lost as to why it does not work when I think it should. I tried several ways, opening of port ranges and no chance for a transfer of the port sucsessful.

    You can change you, outside the ACL to the following:

    outside access list permit tcp any host eq 1412

    access-list outside permit udp any host eq 1412

    outside access-group in external interface

    Save again with: write mem and also issue: clear xlate

    I would like to know if it works.

    Jay

  • Taken serial port redirection supported with PCoIP?

    Does anyone know if the serial port redirection is supported when connecting through the PCoIP Protocol?

    This works if you are using the RDP Protocol, but not of PCoIP.

    Connection of Windows Embedded Standard View 4 customer via View 4 build 233023 XP SP3 server computer virtual resource.

    No, only USB ports can now be redirected with PCoIP

    Best regards

    Linjo

    If you find this information useful, please give points to "correct" or "useful".

  • Problem of recovery of password with pix 501

    Hello

    my organization uses a firewall 501 pix with version 6.2 of the software. After I lost the password I tried earasing using the faq provided on this site (using the file np62.bin through a TFTP server).

    Unfortunately, I can not connect using the password default "cisco."

    Thank you

    Raphaël Cohen, University of Tel Aviv

    Hello Raphael,.

    You need to connect to the PIX via the port on the PIX console. If you deleted the passwords, then (as mentioned before), there is NO password to access privileged EXEC access just don't hit back, now, you will need to configure a password to "enable" with command > pix # enable password - the password is case-sensitive and can be a combination of characters and numbers the length of the password is limited to 16 characters.

    You can now set access telnet as well i.e. config mode > pix (config) # telnet [masque_sous] [interface_name]

    example: (in config mode) telnet 192.168.10.10 255.255.255.0 inside

    Good idea to use the static IP address for the above, makesure to save your config with cmd: write memory

    Hope this helps - Jay

    PS. Thanks to vote this post if it helped you so that other members can use it if they have the same problem you have - that helps! Thank you.

  • 802 1 q tagging with PIX 6.3 (1)

    Someone uses VLAN tagging with PIX 6.3 (1)? I could make an ethernet (eth0, for example) as port trunking to carry vlan2, vlan3/vlan4. But the PIX does not define ethernet as an access port 1 belongs to the vlan 2. Or if I try to assign ethernet3 belongs to vlan3, it would be rejected by the PIX also.

    I thought that the concept of PIX to award port trunking and a VLAN access port must be the same happening with catalyst, but it looks like I'm wrong. Anyone can point the right direction?

    Best regards

    Engel

    Engel: Configure the VLAN on the PIX is not the same what to do on the switch. The PIX interfaces are not configured as 'trunk' or 'access' ports ports. With the PIX, you can assign a vlan is a physical interface - or assign a vlan as a logical on a physical interface interface. And vlan is limited to a single PIX - physical or logical interface, here's an example configuration:

    interface ethernet1 100full

    physical interface ethernet1 vlan50

    logical interface ethernet1 vlan60

    logical interface ethernet1 vlan70

    logical interface ethernet1 vlan90

    interface ethernet2 100full

    physical interface ethernet2 vlan20

    interface vlan1 ethernet2 logical

    logical ethernet2 vlan30 interface

    logical interface ethernet2 vlan40

    !

    nameif ethernet1 Win2K security52

    nameif ethernet2 NT4 security90

    nameif vlan60 User60 security53

    nameif vlan70 utilisateur70 security54

    nameif vlan90 User90 security55

    nameif vlan1 management security91

    nameif vlan30 Novell security50

    nameif vlan40 various security51

    !

    address IP Win2K 10.2.50.1 255.255.255.0

    address IP NT4 10.2.20.1 255.255.255.0

    address IP User60 10.2.60.1 255.255.255.0

    IP utilisateur70 10.2.70.1 255.255.255.0

    address IP User90 10.1.90.1 255.255.255.0

    10.2.1.1 management IP address 255.255.255.0

    address IP Novell 10.2.30.1 255.255.255.0

    address IP Misc 10.2.40.1 255.255.255.0

    I hope this helps!

  • CTI ports associated with more than one group?

    Hello

    I wonder if I can make a pool of CTI ports? I have 150 IVR ports under license, how can I agree to all my applications?

    Thank you.

    Hello

    Simply create a "Cisco Media Group" with 150 channels.

    After that, you can set up a "group of Port ICT" with CTI 150 Ports you created in CallManager and after that in the JTAPI triggers, you must associate the 'Call Control Group' parameter to the "Cisco Media Group" that you cooked up, and he must asscoiate dialogue primary group"at the"CTI Port Group"with 150 ports.

    Hope this helps,

    Juan Luis

  • is compatible with PIX SSM - 4GE manufacturer?

    proposed replacement of PIX - 1FE is SSM - 4GE. This means that it is compatible with PIX?

    http://Cisco.com/en/us/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_cisco_pix_sec_app_cards_and_hwacc.html

    No it's not. The PIX now being EoS, assume you have / will upgrad to the ASA.

    HTH

  • With the help of port security with Failover PIX

    Hello

    I want to configure port security on a switch in which a pair of PIX failover are configured. However, after

    http://www.Cisco.com/univercd/CC/TD/doc/product/LAN/cat6000/12_1e/swconfig/port_sec.htm

    It seems that this is not possible due to the PIX swapping MAC addresses: "If a workstation with a secure MAC which is configured or learned about a secure port address tries to access another secure port, a violation is marked."

    Does anyone know of a way around this?

    Many thanks in advance,

    Matt

    Hello Matt,

    Unfortunately it not there no work around to your problem.

    Thank you

    Renault

  • Redirect with wrong IP or SCAN HEADPHONE PORT.

    Hello guys.

    I will try to be as brief/clear I can. I've been struggling with this problem for a few months now, and yet, I couldn't find a solution and more I tried everything (or at least, that's what I think).

    Scenario of: *

    < Li > node cluster two
    < Li > Oracle CRS and DBMS 11.2.0.3 (power SUPPLY 5 block has been applied to the GI)
    < Li > several databases created on this subject, all the 11.2.0.3.
    LISTENER_SCANs < li > three
    < Li > a local LISTENER by node
    < Li > SINGLETON and UNIFORM services (I'll show you example SINGLETON).
    Mode SHARED server, < li > three dispatchers on random ports. NO, I don't have a firewall problem :)
    B < li > SERVER with LISTENER_SCAN1
    < Li > SERVER A with LISTENER_SCAN2 and LISTENER_SCAN3

    What I want to do? *:

    Connect to the SINGLETON service using a SHARED and of course server using the cluster name (SCAN).

    What is the result? *:

    < Li > IF I use the name of the cluster (cluster.domaine.com) some time, the connection works, sometimes fails.
    < Li > IF I use the LISTENER_SCAN running on the server running the service SINGLETON (B), connection is successful.
    < Li > IF I use the LISTENER_SCAN running on the OTHER (A) server, the connection fails.

    LISTENER-SCAN3 server log has*.
    04-APR-2013 14:05:37 * (CONNECT_DATA=(CID=(PROGRAM=JDBC Thin Client)(HOST=__jdbc__)(USER=bogdan))(SERVICE_NAME=dbname_srv_s)(CID=(PROGRAM=JDBC Thin Client)(HOST=__jdbc__)(USER=bogdan))) * (ADDRESS=(PROTOCOL=tcp)(HOST=bogdansIP)(PORT=58611)) * establish * dbname_srv_s * 0
04-APR-2013 14:05:39 * service_update * asuadev4_2 * 0
04-APR-2013 14:05:40 * (CONNECT_DATA=(CID=(PROGRAM=JDBC Thin Client)(HOST=__jdbc__)(USER=bogdan))(SERVICE_NAME=dbname_srv_s)(CID=(PROGRAM=JDBC Thin Client)(HOST=__jdbc__)(USER=bogdan))) * (ADDRESS=(PROTOCOL=tcp)(HOST=bogdansIP)(PORT=58613)) * establish * dbname_srv_s * 0
04-APR-2013 14:06:38 * (CONNECT_DATA=(CID=(PROGRAM=JDBC Thin Client)(HOST=__jdbc__)(USER=bogdan))(SERVICE_NAME=dbname_srv_s)(CID=(PROGRAM=JDBC Thin Client)(HOST=__jdbc__)(USER=bogdan))) * (ADDRESS=(PROTOCOL=tcp)(HOST=bogdansIP)(PORT=58624)) * establish * dbname_srv_s * 0
    Of Wireshark, I get this*.

    I tried to sniff packages to see what's happening and what I get is a REDIRECT to LISTENER_SCAN3 IP (running on A) with the port of the splitter that runs on server B.
    Redirect Data: (ADDRESS=(PROTOCOL=tcp)(HOST=x.x.x.241)(PORT=56270))
Redirect Data: (ADDRESS=(PROTOCOL=tcp)(HOST=x.x.x.241)(PORT=9317))
Redirect Data: (ADDRESS=(PROTOCOL=tcp)(HOST=x.x.x.241)(PORT=50045))
    bash>srvctl config scan
SCAN name: cluster.domain.com, Network: 1/x.x.x.0/255.255.254.0/bond0
SCAN VIP name: scan1, IP: /cluster.domain.com/x.x.x.242
SCAN VIP name: scan2, IP: /cluster.domain.com/x.x.x.243
SCAN VIP name: scan3, IP: /cluster.domain.com/x.x.x.241

bash>crsctl status res -t
...
ora.LISTENER_SCAN1.lsnr     1        ONLINE  ONLINE       B
ora.LISTENER_SCAN2.lsnr     1        ONLINE  ONLINE       A                                      
ora.LISTENER_SCAN3.lsnr     1        ONLINE  ONLINE       A   
...
ora.scan1.vip               1        ONLINE  ONLINE       B                                     
ora.scan2.vip               1        ONLINE  ONLINE       A                                      
ora.scan3.vip               1        ONLINE  ONLINE       A  
...
    Status of the database and services*.
    ora.dbname.dbname_srv_s.svc     1        ONLINE  ONLINE       B                                     
ora.dbname.dbname_srv_u.svc     1        ONLINE  ONLINE       B                                     
                                2        ONLINE  ONLINE       A                                      
ora.dbname.db                   1        ONLINE  ONLINE       A                 Open                
                                2        ONLINE  ONLINE       B                 Open
    Some settings*.
    NAME                   SID        VALUE                               IsSpec
---------------------- ---------- ----------------------------------- ------
dispatchers                  *          (protocol=tcp)(dispatchers=3)       TRUE
local_listener               *                                                 FALSE
max_shared_servers           *          500                                 TRUE
processes                    *          2000                                TRUE
remote_listener              *          cluster.domain.com:1521    TRUE
sessions                     *          445                                 TRUE
shared_server_sessions       *          100                                 TRUE
shared_servers               *          40                                  TRUE
    What ports are open tied to dispatcher processes*.
    tcp        0      0 :::56270                    :::*                        LISTEN      1356/ora_d000_dbnam 
tcp        0      0 :::9317                     :::*                        LISTEN      1361/ora_d001_dbnam 
tcp        0      0 :::50045                    :::*                        LISTEN      1368/ora_d002_dbnam
    I would like to know if you need aditional information thank you very MUCH for any help you can provide me.
    Alex.

    Levi.

    I just noticed I have not updated in this topic. I'm really sorry.
    The problem is finally solved!

    It's a major problem within the company, but the thing is, we have different environments with different configurations and teams taking care of so many miss communication that's happened.

    Basically, Prod and Cert have Firewall with open ports (that's the dispatchers/dispatchers and so). I asked team on the network firewall that we have and they say that we had no restrictions I stop just a matter "firewall." That as my mistake.

    Not to mention that we have not all restrictions on the firewall, we have, there are certain characteristics which, after a long period of investigation at the networking level (using Wireshark to read the packets and see the results of the redirection, among other things), we could see that some thing in the middle was ruin it.

    That was, "SQLNet Packet Inspection" enabled by default! I had to disable it and everything started working after that.

    Of course, Oracle Support did not help AT ALL which is really bad, because we spend a lot of money on support. I told her about the firewall at the end and they say 'contact your network management team' rather than provide an any clue on this question.

    Anyway, thanks a LOT Levi for your dedication to my problem.

    Thank you for the Uruguay.
    Alex.

  • PIX - static and port redirection to the same host

    Version 6.2 of the PIX

    I was watching the following config:

    static (inside, outside) 172.18.124.99 tcp telnet 10.1.1.6 telnet netmask 255.255.255.255 0 0

    static (inside, outside) 172.18.124.99 tcp ftp 10.1.1.3 ftp netmask 255.255.255.255 0 0

    static (inside, outside) 172.18.124.208 tcp telnet 10.1.1.4 telnet netmask 255.255.255.255 0 0

    public static tcp (indoor, outdoor) interface 10.1.1.5 telnet telnet netmask 255.255.255.255 0 0

    public static tcp (indoor, outdoor) interface 10.1.1.5 www www netmask 255.255.255.255 0 0

    static (inside, outside) tcp 172.18.124.208 www 8080 10.1.1.7 netmask 255.255.255.255 0 0

    go to this URL,

    http://www.Cisco.com/en/us/products/HW/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml#topic11

    and I was wondering if the following configuration will work or not:

    static (Inside, Outside) 172.18.124.10 TCP 10.1.1.10 netmask 255.255.255.255 0 0

    static (Inside, Outside) 172.18.124.10 TCP 10.1.1.10 netmask 255.255.255.255 0 0

    Thanks in advance for any input.

    Ariel

    Yes, it'll be OK. What you can't have is the following:

    static (Inside, Outside) 172.18.124.10 TCP 10.1.1.10 netmask 255.255.255.255 0 0

    static (Inside, Outside) 172.18.124.10 TCP 10.1.1.10 netmask 255.255.255.255 0 0

    and you can't have:

    static (Inside, Outside) 172.18.124.10 TCP 10.1.1.10 netmask 255.255.255.255 0 0

    static (Inside, Outside) 172.18.124.10 TCP 10.1.1.10 netmask 255.255.255.255 0 0

    In other words, you cannot map the port itself to two different ports, in both directions. The PIX will get confused when it receives a packet on the duplicate port and does not know what a host to map to. As everything inside and outside ports map to unique ports on the other interface then you're OK.

  • Redirect with e4200 and 660 embarq modem port

    Hello, I have a router e4200 and a modem 660 series, I am trying to portforward for a game called minecraft, I can't get ports open, I called century link they told me to put my modem in Bridge mode, so I have, they said, must be public, my private IP not now, it is still private, what I am doing wrong.

    Very well. Great! Now follow these steps and see what happens.

    http://www6.nohold.NET/Cisco2/UKP.aspx?pid=93&login=1&VW=1&app=search&articleid=17241&userrole=links...

    In addition, under the tab 'security' on the router, uncheck the option, "filter anonymous Internet requests".

    The tab of the router configuration. There is an option 'MTU '. Change it to manual and reduce the size to 1400.

    See if that helps.

  • Problem with PIX 501-&gt; L2L 1721 VPN

    I am setting up a site to site vpn according to the http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008051a69a.shtml.

    I want to connect 192.168.105.0/24 and 192.168.106.0/24.

    PIX01 is 192.168.106.1, with dynamic external IP (B.B.B.B)

    RTR01 is 192.168.105.1, with dynamic external IP address (I'm just using DHCP current address of the ISP as A.A.A.A in the config of PIX01 - this is a temporary application, not critical where I can update the address if necessary)

    It seems that the VPN tunnel is established but traffic does not return the router to the pix.  I temporarily hosted all of the traffic on indoor/outdoor PIX interfaces (and icmp).

    If I enable icmp debug I see ping requests from the client to 192.168.106.100 internal interface of the router (192.168.105.1), but no return icmp:

    On PIX01:

    180:-Interior ICMP echo request: 192.168.105.1 ID = 1 length = 40 seq = 298 192.168.106.100
    181:-Interior ICMP echo request: 192.168.105.1 ID = 1 length = 40 seq = 299 192.168.106.100
    182:-Interior ICMP echo request: 192.168.105.1 ID = 1 length = 40 seq = 300 192.168.106.100
    183:-Interior ICMP echo request: 192.168.105.1 ID = 1 seq = length 301 = 40 192.168.106.100

    On RTR01:
    * 03:40:46.885 22 dec: ICMP: echo responded, 192.168.105.1 src, dst 192.168.106.100
    * 03:40:51.713 22 dec: ICMP: echo responded, 192.168.105.1 src, dst 192.168.106.100
    * 03:40:56.713 22 dec: ICMP: echo responded, 192.168.105.1 src, dst 192.168.106.100
    * 03:41:01.709 22 dec: ICMP: echo responded, 192.168.105.1 src, dst 192.168.106.100

    Output of running sh crypto isakmp his:

    PIX01 (config) # sh crypto isakmp his
    Total: 1
    Embryonic: 0
    Src DST in the meantime created State
    A.A.A.A B.B.B.B 0 1 QM_IDLE

    RTR01 #sh crypto isakmp his
    status of DST CBC State conn-id slot
    A.A.A.A B.B.B.B QM_IDLE 1 0 ACTIVE

    Out of HS crypto ipsec his:

    PIX01 (config) # sh crypto ipsec his

    Interface: outside
    Crypto map tag: IPSEC, local addr. B.B.B.B

    local ident (addr, mask, prot, port): (192.168.106.0/255.255.255.0/0/0)
    Remote ident (addr, mask, prot, port): (192.168.105.0/255.255.255.0/0/0)
    current_peer: A.A.A.A:500
    LICENCE, flags is {origin_is_acl},
    #pkts program: 103, #pkts encrypt: collection of #pkts 103, 103
    #pkts decaps: 0, #pkts decrypt: 0, #pkts check 0
    compressed #pkts: 0, unzipped #pkts: 0
    #pkts uncompressed: 0, #pkts compr. has failed: 0, #pkts decompress failed: 0
    #send 12, #recv errors 0

    local crypto endpt. : B.B.B.B, remote Start crypto. : A.A.A.A
    Path mtu 1500, overload ipsec 56, media, mtu 1500
    current outbound SPI: 7cb75998

    SAS of the esp on arrival:
    SPI: 0xb896f6c6 (3096901318)
    transform: esp - esp-md5-hmac.
    running parameters = {Tunnel}
    slot: 0, conn id: 1, crypto card: IPSEC
    calendar of his: service life remaining (k/s) key: (4608000/3151)
    Size IV: 8 bytes
    support for replay detection: Y

    the arrival ah sas:

    SAS of the CFP on arrival:

    outgoing esp sas:
    SPI: 0x7cb75998 (2092390808)
    transform: esp - esp-md5-hmac.
    running parameters = {Tunnel}
    slot: 0, conn id: 2, crypto card: IPSEC
    calendar of his: service life remaining (k/s) key: (4607999/3151)
    Size IV: 8 bytes
    support for replay detection: Y

    outgoing ah sas:

    outgoing CFP sas:

    RTR01 #sh crypto ipsec his

    Interface: Vlan600
    Crypto map tag: IPSEC, local addr A.A.A.A

    protégé of the vrf: (none)
    local ident (addr, mask, prot, port): (192.168.105.0/255.255.255.0/0/0)
    Remote ident (addr, mask, prot, port): (192.168.106.0/255.255.255.0/0/0)
    current_peer B.B.B.B port 500
    LICENCE, flags is {}
    program #pkts: 10, #pkts encrypt: 10, #pkts digest: 10
    decaps #pkts: 10, #pkts decrypt: 10, #pkts check: 10
    compressed #pkts: 0, unzipped #pkts: 0
    #pkts uncompressed: 0, #pkts compr. has failed: 0
    #pkts not unpacked: 0, #pkts decompress failed: 0
    Errors #send 0, #recv 0 errors

    local crypto endpt. : A.A.A.A, remote Start crypto. : B.B.B.B
    Path mtu 1500, mtu 1500 ip, ip mtu BID Vlan600
    current outbound SPI: 0xB896F6C6 (3096901318)

    SAS of the esp on arrival:
    SPI: 0x7CB75998 (2092390808)
    transform: esp - esp-md5-hmac.
    running parameters = {Tunnel}
    Conn ID: 2002, flow_id: SW:2, crypto card: IPSEC
    calendar of his: service life remaining (k/s) key: (4556997/3076)
    Size IV: 8 bytes
    support for replay detection: Y
    Status: ACTIVE

    the arrival ah sas:

    SAS of the CFP on arrival:

    outgoing esp sas:
    SPI: 0xB896F6C6 (3096901318)
    transform: esp - esp-md5-hmac.
    running parameters = {Tunnel}
    Conn ID: 2001, flow_id: SW:1, crypto card: IPSEC
    calendar of his: service life remaining (k/s) key: (4556997/3076)
    Size IV: 8 bytes
    support for replay detection: Y
    Status: ACTIVE

    outgoing ah sas:

    outgoing CFP sas:

    I can provide more information if necessary.

    Thanks in advance for any help,

    CJ

    ISAKMP uses UDP/500 and it is true he helped through phase 1 being upwards (QM_IDLE).

    IPSec uses ESP or UDP/4500, and this is what must be authorized by the FW.

  • Deny access to Internet with PIX 500 series

    I need deny all access to the Internet for some guests at various locations. We use the PIX 501 and 506 firewalls to create a full mesh of VPN between offices. How to configure access lists to deny access to the Internet to only a certain number of hosts?

    Configure an access inside the interface list and begin by denying the host that you want to block after that add the hosts and protocols that should be able to connect to the Internet.

    example:

    Internet access list deny ip 192.168.1.10 host everything

    Internet access list deny tcp host 192.168.1.10 any eq 80

    allow Internet access list ip 192.168.1.20 host a

    ...

    Give me a more detailed example.

    You can also work with groups of objects to be more specific and group several UDP or TCP port.

    example:

    object-group service tcp Web

    EQ object of port 80

    EQ object of port 443

    object-port eq 21

    internet access list deny tcp 10.2.1.0 255.255.255.0 any object-group Web

    Internet access-list permit tcp host 10.2.1.10 a host Web object-group

    allow a whole list of internet access

    sincerely

    Patrick

  • Automatically redirected with the message "setting have been changed."

    A few weeks ago, a friend, I have linked to a router(RT-N12D1) from ASUS on IP 192.168.1.1 and now no matter where I am whenever I browse to 192.168.1.1I get redirected to a page that is display in the attached file, even if I don't HAVE to connect to the RT-N12D1. I try to connect connected to a Ubiquiti device with the IP address 192.168.1.1 or (default) and my system is set to a static IP address of 192.168.1.5.
    I deleted cookies and history, rebooted the system and uninstalled / reinstalled FireFox with the same result.

    Any additional recommendations will be appreciated.

    Concerning

    The problem was solved by going in Open the Menu > Options > Advanced Offline Web content and data Web . He had listed 192.168.1.1 so I deleted and now its work.

    This means that when Firefox has been uninstalled it does not erases all its parameters as I expect.

  • Can I update my Firefox if I have problems of redirect with the current version?

    Normally I would wait until things have been fixed, but not having any luck finding is not a solution and a number of sites are grumbling to me to still use the old version.

    Well, for my part, got tired of waiting for an answer and did the only thing I knew to do.
    First of all, I did a thorough scan of all drives with the latest definitions of virus/parasite and knew things were clean this way before you uninstall and re-make Firefox from scratch.
    Then I saved my favorites to .html and did an uninstall complete the old Firefox and didn't use the option to save my old settings, etc. (encrypted I would rather Redo from scratch that the chances of saving a part of my problem now.) After I had uninstalled, deleted the Firefox subdirectory in C:/Program Files and made a boot cold I advanced and installed a new version of Firefox, did the settings for my taste and import my favorites.
    All looks good after a number of cold and hot, boots so guess I cured the problem. I suggest you do this too and do not recommend that do you a simple update that may well leave the intact redirection problem. No evidence of this, but not worth the possibility for me. Good luck to all of you who take this route!

Maybe you are looking for