[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] SAD question
Stephan, You would need rules like these: Any - 64.x.x.x - Some service - Accept - Long NAT: Any - 64.x.x.x - Any - orig - 10.x.x.x - orig Routing: you need a route like this: route add -p 64.x.x.x mask 255.255.255.255 10.x.x.x And you need to include both the internal and external addresses in your anti-spoofing setup on the dmz interface. Lars > -----Original Message----- > From: Stephan Dubeau [mailto:[email protected]] > Sent: Thursday, August 08, 2002 16:41 > To: [email protected] > Subject: [FW-1] SAD question > > > S.A.D. (System Administrator by Default = NEWBIE!!!) > > Morning all. Is it possible to do this ; > > I currently using FW-1 4.1 on NT, I got a DMZ for my ftp > server, the address > for this machine is 10.x.x.x, so FW-1 is NATing this to give > access to/from > the Internet. I like to add a new machine with a legal IP > address 64.x.x.x. > in this DMZ. > > How my rules would look like? > > Thanks > > > Stephan Dubeau > Draftsman & IT Manager > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|