Re: [FW1] FW-1 / SMTP / Static NAT / SINGLE IP Address

["Tim Holman" <tim_holman@FW1-NOSPAMhotmail.com>]

Thanks Michael,
  I couldn't get SMTP to pass through, as apparently there is a DoS attack
that can be made on Checkpoint FW-1 if you let the FW-1's external IP
address receive SMTP directly, regardless of whether or not you NAT it (so
they've disabled it!).
  I had to NAT extra IP address for the mail server to get it to work.

Cheers,

Tim


----- Original Message -----
From: Michael Liberte <mliberte@netvision.net.il>
To: 'Tim Holman' <tim_holman@hotmail.com>;
<fw-1-mailinglist@lists.us.checkpoint.com>
Sent: 13 February 2001 10:01
Subject: RE: [FW1] FW-1 / SMTP / Static NAT / SINGLE IP Address


> Configure the external IP to be an MX for your domain.
> Create a rule:
> any firewall smtp=>resource accept
> put your mail server real address (10.0.0.1) into the mail server field in
> the smtp resource.
> Cheers.
> P.S. This is not very secure...
> Michael.
>
> -----Original Message-----
> From: Tim Holman [mailto:tim_holman@hotmail.com]
> Sent: Monday, February 12, 2001 12:47 PM
> To: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: [FW1] FW-1 / SMTP / Static NAT / SINGLE IP Address
>
>
>
> I have setup FW-1 2000 on an NT box with 2 network cards.
> I have only ONE external IP address.
> All internal machines can access the Internet, send mail or whatever, but
I
> just cannot get the external IP address translated to the internal mail
> server.
> I've done this before with other equipment - Cisco, Shiva, Intel, but
can't
> seem to get this to work !
>
> The Q is - how do I get FW-1 configured to let an internal mail server
> RECEIVE mail, using only ONE external IP address for everything ?
>
> Hope someone can help !
>
> Tim
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
>
>
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================