| About the PIX...I am thinking I need an access-list like this
ip access-list 100 permit tcp any 192.168.1.100 eq 3389
apply it to the outside interface like this
config-if# ip access-group 100 in
now for the reverse so traffic flows back out
ip access-list 101 permit tcp 192.168.1.100 any eq 3389
apply to the internal interface
config-if# ip access-group 101 out
Any ideas if thats the way to do it?
__________________  |