Hi,
Yes i'm dynamically natting only the LAN behind the internet interface
of the gateway.
Raz
-----Message d'origine-----
De : Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] De la part de Robert
Plaenk
Envoyé : vendredi 26 mars 2004 18:55
À : FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Objet : Re: [FW-1] Problems with DMZ network with NG AI R54!
Are you natting? What version of the fw are you running?
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Raz
BIRAMAH
Sent: Friday, March 26, 2004 12:30 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Problems with DMZ network with NG AI R54!
Hi All,
Could somebody help me? I have a FW module with 4 interfaces dispatched
like this :
- eth0 connected to the LAN via a switch
- eth1 connected to the VPN via a Cisco VPN Router
- eth2 connected to the DMZ via a switch
- eth3 connected to Internet via a VSAT Router (RG2000)
Despite putting a specific rule, just after the Stealth one, which
specifies that all traffic from ANY to DMZ_NET must be allowed, my DMZ
servers can't be reach from the Internet. But from the LAN everything is
ok.
Is it any specific configuration to do on the FW module (installed on
SPLAT)?
Thanks a lot
Raz
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
************************************************************************
**************************
This E-mail message (including attachments, if any) is intended for the
use
of the individual or entity to which it is addressed and may contain
information
that is privileged, proprietary, confidential and exempt from
disclosure. If you are
not the intended recipient, you are notified that any dissemination,
distribution or
copying of this communication is strictly prohibited. If you have
received this
communication in error, please notify the sender and erase this E-mail
message
immediately.
Le présent message électronique (y compris les pièces qui y sont
annexées, le
cas échéant) s'addresse au destinataire indiqué et peut contenir des
renseignements
de caractère privé ou confidentiel. Si vous n'êtes pas le destinataire
de ce document,
nous vous signalons qu'il est strictement interdit de le diffuser, de le
distribuer ou de
le reproduire. Si ce message vous a été transmis par erreur, veuillez en
informer
l'expediteur et les upprimer immédiatement.
** eSafe scanned this email for viruses, vandals and malicious content.
**
** www.netcyclops.com ***
************************************************************************
**************************
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
