[FW1] DNS in firewall machine

["Mário" Behring <mariobehring@FW1-NOSPAMyahoo.com>]

Hi people,

I am having problem with a simple task. Before
explainning things I should say that I am consulting a
customer and that this particular firewall was already
installed and NOT working properly, so ... 

I have a rule in this FW-1 rulebase to permit access
to the internet from the internal network. I created a
NAT (hide) to a valid address and a network object
that is my entire internal network (like 10.10.0.0)
and created the following rule:

INTERNAL_LAN - ANY - HTTP/HTTPS/DOMAIN-UDP - ACCEPT

Then I created the arp command to link the valid IP
address that I was using to hide my LAN to the
firewall's external network adapter MAC address. I
included this line at the autoexec.bat and
local.arpfiles. 

I guess that now it all should work, but it didn't. It
worked only when I entered the DNS address information
(the DNS is at an ISP) in a internal machine at the
TCP/IP properties. The company does not have an
internal DNS. I also discovered that the DNS was
configured in the firewall (NT). So I ask:

Do I have to configure DNS at the firewall machine? 
Do I have to configure DNS at the machines in
theinternal network ?

Thank you.

Mario

__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================