[FW1] Automatic NAT question

[Neil Pike <NeilPike@FW1-NOSPAMcompuserve.com>]

 I have automatic NAT working when defined on network objects (FW-1 4.1
SP2) and the traffic only needs to be translated one way (either source or
destination).
 
 However, when I have a specific rule allowing an inside object to talk to
an outside object, BOTH with auto-address translation on the object, the
rule doesn't match and the packet is dropped.
 
 If I remove the auto-NAT and put in a single manual translation rule then
everything works.
 
 Is there any way around this, or is it just a limitation of the way
Checkpoint checks translation rules?  Does it effectively treat the
translation rules like the firewall rules and stop searching as soon as the
first one matches and is applied?  (Which would explain the problem)
 
 cheers
 
 Neil Pike 
 Protech Computing Ltd

 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================