create a manual no NAT rule. that would be
Original Packet
Source Address - Internal
Destination Address - DMZ
Translated Packet
Source Address -Original
Destination Address - Original
Roger Herr
WhyNot? Consulting Services
24165 IH 10 West Suite 217-183
San Antonio, Texas 78257
210-860-3990
Some men see things as they are and say why?
I dream things that never were and say "Why Not?"
-Robert F. Kennedy
----- Original Message -----
From: "Erik Decker" <edecker AT NORMAL DOT ORG>
To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Sent: Thursday, December 29, 2005 11:20 AM
Subject: [FW-1] NATting, ojbects and DMZ's
Here is the scenario:
I have 3 interfaces on my enforcement module. One external, one DMZ,
one internal. All different subnets. Natting takes place for the DMZ,
with internal addresses on the objects.
How can I set up my rules so traffic from the internal network -> DMZ
does not get natted as it goes through the EM? But taffic from the DMZ
-> External does (as well as external->dmz)?
Right now I have static natting set on the single object for the hosts
in the DMZ. I have tried setting up two hosts, instead, and doing a
manual NAT, however that didn't work out real well.
Ideas?
Erik Decker
Network Administrator
Town of Normal
(309) 454-9515
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
