RE: [FW1] static NAT and Antispoofing

["Reed Mohn, Anders" <Anders.Reed.Mohn@FW1-NOSPAMitcompagniet.no>]

The external interface is set during installation.
(see SecAdmin.pdf, chapter 2)

The value you speciufy then is stored (at least on NT)
in a file named "external.if".

Cheers,
Anders :)



> -----Original Message-----
> From: Thomas Borger [mailto:Thomas.Borger@gmservice.de]
> Sent: 3. september 2001 11:19
> To: fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: [FW1] static NAT and Antispoofing
> 
> 
> 
> Hi,
> 
> On page 198 from Checkpoint security courseware is the definition from
> "Interface Prooerties - Security Tab" "Others".
> 
> <quotation>
> 
> Others
> 
> This selection allows all packets, except those whose source 
> IP address
> belong to a network listed under Valid Addresses for the 
> object`s internal
> interface. IP addresses not specified on another 
> VPN-1/Firewall-1 interface
> are allowed through the gateway.
> 
> </quotation>
> 
> My question is who can VPN-1/Firewall-1 software distinguish between
> external and internal interface? On the corresponding tab is 
> no posibilty
> to define an interface as ex- or internal.
> 
> best regards
> Thomas
> 
> 
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================