Re: [FW1] FW-1 with NAT

["David Luong" <david.luong@FW1-NOSPAMtelus.net>]

Hi Robert,

Thanks for the insight. I'm pretty new to checkpoint so if you don't mind my
ignorance, how do you make a NAT original rule?

David.

----- Original Message -----
From: "Robert MacDonald" <rmacdonald@gfs.com>
To: <rmacdonald@gfs.com>; <David.Luong@icbc.com>;
<fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Tuesday, November 14, 2000 8:37 PM
Subject: RE: [FW1] FW-1 with NAT


>
> Yep, I'm in a duh'ish mode...I know, it's bad form to
> reply to one's own post, but ignore that last reply(he's
> a fool anyway ;)
>
> Create a group called local_net and do the hide nat
> with that. Or, create the rule manually in the address translation
> tab of the rulebase. You might want to make sure you have
> a nat rule from your local_net to your local_net that doesn't change
> anything(orig orig orig).
>
> Robert
>
> >>> "Robert MacDonald" <rmacdonald@gfs.com> 11/14/00 9:59:32 PM >>>
> >
> >Andrew,
> >
> >I might be in one of those duh'ish modes, but why
> >don't you just use hide nat? You should have an object
> >defined as the fw with both the internal and external
> >IP's. Go to the address translation/nat tab and choose
> >hide mode(or you can define two rules yourself in the
> >NAT tab of the rulebase.)
> >
> >I don't see where the license comes into effect here.
> >
> >Robert
> >
> >- -
> >Robert P. MacDonald, Network Engineer
> >Team Lead, e-Business Infrastructure
> >G o r d o n   F o o d    S e r v i c e
> >Voice:email: rmacdonald@gfs.com
> >
> >>>> "Luong, David" <David.Luong@icbc.com> 11/14/00 5:47:23 PM >>>
> >>Thanks for the response...
> >>
> >>All other users will be localized to my network and all will be using a
> >>private 10.x.x.x network while the external (public) interface on the NT
box
> >>will be 216.232.x.x. I have gained resposes from people where I have to
tie
> >>in my license to my internal interface, but what about my external ????
> >>
> >>David.
> >>
> >>-----Original Message-----
> >>From: Andrew Bagrin [mailto:andrewb@secure-1.com]
> >>Sent: Tuesday, November 14, 2000 2:42 PM
> >>To: Luong, David; 'Firewall Mailing List'
> >>Subject: Re: [FW1] FW-1 with NAT
> >>
> >>How are the other users connected to you? to what network? with what IP
> >>address?
> >>Andrew Bagrin
> >>Secure-1
> >>> >>www.secure-1.com
> >>----- Original Message -----
> >>From: Luong, David <David.Luong@icbc.com>
> >>To: 'Firewall Mailing List' <fw-1-mailinglist@lists.us.checkpoint.com>
> >>Sent: Tuesday, November 14, 2000 1:48 PM
> >>Subject: [FW1] FW-1 with NAT
> >>
> >>> Hi Folks,
> >>>
> >>> I have a scenario where I have a PC running NT4.0 SP6a, two NIC's with
> >>FW-1
> >>> 4.1 installed on it. One of the NIC will be the external interface
> >>> (Internet) and the other will be internal to my private network. I
have
> >>4-5
> >>> other PC's who wants to gain access to the Internet through this NT
box
> >>via
> >>> ADSL connection. My question is can I have FW-1 do NAT sitting on the
> >>> internal interface serving other PC's who wants to get on the net? If
so,
> >>> how can I configure it?
>
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================