[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Problem with NAT'ed HP-UX Telnet
Hello
The "not working" traceroute is a bug of NG FP2. I had the trouble,
installed FP3 and all is back to normal.
JF
On Wed, 4 Dec 2002, Stuart Carrison wrote:
> Chris,
>
> We have a couple of HP-UX (11) boxes running FTP/etc for us. Although we us
> FP2.
>
> We don't have any issues.
>
> Have you tried tracing a route from your hp-ux box to the outside world? I
> realise your fw is probably dropping ICMPs, but at least you can verify it's
> taking the proper route....
>
> Try telnet'ing from the hp box to fw on an accepted port (CPMI... CPTOPO...)
> and see if you get an established connection
>
> Stu
>
> -----Original Message-----
> From: Chris Beauchamp [mailto:[email protected]]
> Sent: 04 December 2002 03:25
> To: [email protected]
> Subject: [FW-1] Problem with NAT'ed HP-UX Telnet
>
>
> Hi,
>
> I have an HP-UX server behind NG FP3 using NAT that will not respond to a
> telnet client.
>
> If I setup a telnet server on Windows 2000 (on the same subnet as the HP-UX
> server) with the exact same rule/nat settings, it works properly. Also ping
> (i.e. ICMP-proto) also does not work with HP-UX but fine on the Win2k
> server.
>
> On both scenarios, the firewall reports accepting the traffic on the correct
> rule and NAT happening on the correct nat rule. Although I am not the admin
> on the HP-UX box, I have had the admin verify that the server is setup
> correctly with the correct IP/Mask/Gateway information. This HP-UX server
> responds correctly from non-firewalled subnets.
>
> It looks like a NAT issue with this flavour of HP-UX. Does anybody know of
> special configurations or settings for this HP-UX to allow it to work with a
> NAT'ed address?
>
> Thanks in advance.
>
> Chris
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
> intY has scanned this email for all known viruses (www.inty.com)
>
>
>
> This email has been checked for all viruses at the internet level by MailDefender.
> MailDefender is powered by Sophos anti-virus (www.maildefender.net)
>
>
--
Jean-Francois Gobin - Administrateur gobinjf.be
http://www.gobinjf.be mailto:[email protected]
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================