Re: [FW1] Solaris routing question

["Barry W. Kokotailo" <merlin@FW1-NOSPAMathabascau.ca>]

Use the route command to add a static route.

    # route add -net <dmz subnet> <target ip> <gateway ip to get there>

To check:

    # netstat -nr

More info by:

    # man route

Hopes this helps.

merlin
 

Lance Spitzner wrote:

On Tue, 5 Sep 2000, Barringer Nick wrote:

> I need to set up my firewall to route internally from my DMZ to a host with
> a non-reserved IP address. I do not want to route the entire network
> internally as the company is using only part of a class B range.
>
> Can I get away with just adding the one host in S79fw1-routes? I can not see
> a way of adding the network they are using with an appropriate subnet mask
> in this file.

I've written a paper on setting up routing with Solaris boxes, you may want
to check it out.  I wrote it based on my experiences with FW-1.

http://www.enteract.com/~lspitz/routing.html

hope that helps :)

lance

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================

-- 
Barry W. Kokotailo
Senior Unix Systems AdministratorPGP =  71 71 96 A3 C0 C2 23 7A  23 4E D4 04 8C E0 42 6B  B0 2D D1 A5