Re: [FW-1] Static Mapping and ARP issue in Win2k NG FP3

[Wayne Ho <wenghon828@FW1-NOSPAMYAHOO.COM>]

ALL:

 I solved this problem by deleting static arp, disable
static mapping, re-enable global automatic arp
configuration. It seems Checkpoint doesn't recognize
the proxy arp occasionally.

Wayne
--- "Van Liere, Derek" <DMV@CCSD.CC.STATE.AZ.US>
wrote:
> First of all, you probably want to make that entry
> in the routing table
> persistent (-p) and be sure the routing is working
> correctly.
> Secondly, there is a hotfix (HF1) for FP3 which
> fixes the arp issue in
> W2K... At least it did for me.
> If you don't want to install the Hotfix, there is a
> program fix (fwparp.exe)
> which you can run in a batch file every "x" hours
> which will fix the arp
> issue for your static NAT entries.   I had this
> running every 12 hours using
> the scheduler before installing HF1.
>
> Hope this helps..
>
> Derek
>
> -----Original Message-----
> From: Wayne Ho [mailto:wenghon828@YAHOO.COM]
> Sent: Tuesday, February 04, 2003 11:51 AM
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: [FW-1] Static Mapping and ARP issue in
> Win2k NG FP3
>
>
> All Checkpoint gurus:
>
> I want to allow http into an internal webserver. The
> IP address of the firewall external interface is
> 1.2.3.1., the internal is 10.0.208.5. The web server
> is 10.0.208.9, with static mapping to 1.2.3.10 which
> is visible from world. According to Checkpoint FP3
> with automatic arp configuration, I shouldn't need
> to
> put the static entry. However, when I ping any
> external IP address from webserver, the ping doesn't
> go through. I allow outgoing in firewall. The
> firewall
> should log going out, but nothing comes back. I am
> pretty sure it's routing issue. So, I have
>
> route add 1.2.3.10 MASK 255.255.255.255 10.0.208.5
> and arp -s 1.2.3.10 10-be-05-0f-02-0a
>
> Still have no clue. Please give me advise.
> Thanks.
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up
> now.
> http://mailplus.yahoo.com
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================