NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] NAT & spoofing



Yes, you did it right.

Sun

> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]]On Behalf Of
> Iztok Umek
> Sent: Wednesday, January 10, 2001 2:18 PM
> To: [email protected]
> Subject: [FW1] NAT & spoofing
> 
> 
> 
> 
> 
> I just configured FW-1 4.1 SP3 (RedHat 6.2).
> 
> I did use "Hide" NAT for all the network with exception of host for
> Exchange OWA which has different "Static" NAT.
> 
> I did add route and arp for that external address. In order to work I
> first had to remove spoofing protection on the FW-1 internal 
> interface. 
> 
> Figuring out that this is not good I was playing around and did next
> thing:
> 
> On internal interface instead of "This net" I had to use "Specific",
> where I put "Internal Network" + "External IP of NATed 
> machine" (in one
> group).
> 
> Is this normal way of doing it or did I do something wrong with route
> and arp so I had to "correct" it with spoofing rules.
> 
> Regards,
> 	Iztok
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.