Hi, Nattha,
the only solution to me, regarding R55, was to build groups
like 'non private' or 'private' IP-adress-ranges ´cause 'any' wasn't
accepted.
Cheers
James
-----Ursprüngliche Nachricht-----
Von: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]Im Auftrag von Nattha
Kongtong
Gesendet: Donnerstag, 30. Juni 2005 07:24
An: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Betreff: [FW-1] NAT ANY destination to one IP address
Hi guys,
I have a question about NAT policy. Is it possible to create NAT rule
that translates any destination IP address to a specific address? Ex.
Original packet:
source = ip_pool1
destination = any
service = any
Translated packet:
source = original
destination = gateway1
service = any
I've tried it in Checkpoint Firewall-1 4.1 but it is not allowed
(translated packet have to config destination = orignal only). Does
anyone know if I can apply above solution in Checkpoint NG R55? Or is
there other solution to do NAT as above? Please help.
Regards,
Nattha
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
