Re: [FW1] nating for nt

[Wang Lifu <yd_fw@FW1-NOSPAMsina.com>]

Hello jayant,

jn> 6)also mapped arp entries for static ip to
jn>  internal mac addr.
add local.arp file in $FWDIR/state/
<static ip>     <external mac addr>

Wang

Wednesday, September 13, 2000, 9:15:13 AM, you wrote:
jn> hello ,
jn> i have a network as follows and my natting is not
jn>  working from either side of the fw.

jn> internet
jn> |
jn> fw--DMZ(mail ,www)(using static natting for both)
jn> |
jn> |
jn> inetrnal(192.168.0.1)

jn> * firewall on NT box.

jn> 1)fw-1 external interface 202.54.1.45
jn> 2)fw -1 dmz interface 192.168.1.1
jn> 3) www 192.168.1.2 --> 202.54.1.46(static)
jn> 4) mail 192.168.1.3 --> 202.54.1.47(static)
jn> 5) added route for www amd mail on firewalled host
jn> i.e 202.54.1.46 192.168.2 and 202.54.1.47 192.168.1.3
jn> 6)also mapped arp entries for static ip to 
jn>  internal mac addr.
jn> 7) rules specify any to www allow and same for mail 
jn> (testing) still from outside nor from inside i
jn>  am able to go on either side.
jn> when i snoop my firewall host doesnt respond the arp 
jn> requst,what would be the possibilites.
jn> please help me.



jn> 4) 
jn> 5) fw-1 internal interface 192.168.0.1


jn> ____________________________________________________________________
jn> Get free email and a permanent address at http://www.netaddress.com/?N=1


jn> ================================================================================
jn>      To unsubscribe from this mailing list, please see the instructions at
jn>                http://www.checkpoint.com/services/mailing.html
jn> ================================================================================




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================