[FW-1] web server on secure lan

[Richard Marshall <richard.marshall@FW1-NOSPAMNETDOCTOR.CO.UK>]

Hi,

I'm after some advice/confirmation.

I have had to setup a test environment webserver on an internal lan with
a NAT to a public IP. Public access now works without problem (thanks to
some pointers from this list).

However, the tech guys that have requested the test env. requested that
they should be able to access the public natted ip themselves. i.e. out
from the lan via a hide address and back into the lan via the nat
address of the webserver. I was sceptical that it was possible (and am
not sure why they feel it's necessary). Having spent the day trying
every combination of nat rules, static routes, etc. that I can think of
I have come to the conclusion it's not possible.

Am I right in thinking this, or is it possible after all?

I am running fw-4.1 sp3 on nokia (it's a distributed environment, but it
is only the lan behind the firewall in question that can't access the
public IP address.)

thanks in advance

rich

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================