[FW1] Please help: Blocking user jumping to different servers using tel net even if not authorized by firewall.

[Philippe.Schultz@FW1-NOSPAMcec.eu.int]

Dear all, relating to the following schema, 


NETWORK A                                                      NETWORK B

WORKSTATION A /------------/ FIREWALL /----------------------/ SERVER B1
 
/
 
/  SERVERB2



Firewall rule: 
from workstation A to server B1: allow
any any : drop

I wondering about a solution to avoid a user on workstation A which is
connected to server B1 to connect to servers B2 using telnet or rlogin ...
Even if the user does not have a permitted access to server B2 from its
workstation, up to me, he can use server b1 as a "gateway" to server b2.

Thanks for your help.

Philippe.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================