| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] NAT through VPN... Urgent
- To: [email protected]
- Subject: Re: [FW-1] NAT through VPN... Urgent
- From: Lars Troen <[email protected]>
- Date: Wed, 24 Apr 2002 11:41:45 +0200
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcHrczujEnTtLroCQRG1h6UokYdnlAAAHUtQ
- Thread-topic: Re: [FW-1] NAT through VPN... Urgent
comments below..
> -----Original Message-----
> From: Reinhard Stich [mailto:[email protected]]
> Sent: Wednesday, April 24, 2002 09:08
> To: [email protected]
> Subject: Re: [FW-1] NAT through VPN... Urgent
[snip]
> * this machine has to be part of your encryption-domain
And also the machine's NAT address.
> * you have to connect to the *internal* ip-address of the machine
not entirely correct. It's possible to use securemote to connect to a NAT'ed (non-internal) ip address as long as it (read: the NAT'ed ip address) is part of the encryption domain.
> * you have to use a service not allowed by any other rule
> above (if you try
> to ping and icmp is allowed in the implied rules it won't be
> encrypted ...)
>
Lars
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
