Re: [FW1] PAT?

[bandit@FW1-NOSPAMzcore.net (Carl E. Mankinen)]

I have done this before.

I think what I did was create a loopback interface on the firewall and assign an IP to it.
Then put in a static route from the virtual outside IP (the one that you have in local.arp)
to the loopback IP.

So the packet will arrive on the outside interface, rule base match occurs, the packet
is the routed internally to the loopback exit interface, NAT rulebase match occurs and
the packet gets the new destination address based on the service type.
Since it's a loopback interface, it then routes back thru again and out the proper interface.

Pretty sure this is how I got it to work. I don't know, perhaps there is a more elegant solution.

----- Original Message ----- 
From: "Brian Mulford" <BMulford@colesys.com>
To: "Fw1 Mailing List (E-mail)" <fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Wednesday, January 03, 2001 1:03 PM
Subject: [FW1] PAT?


> 
> is this possible on cp4.1 on NT?
> 
> i have to servers inside, 10.1.1.1 and 10.1.1.2
> 10.1.1.1 is an smtp server, and 10.1.1.2 is an http server
> the outside address is 216.X.X.10
> 
> is it possible to have them NAT to the same outside ip address, i.e to
> address translation on the port level?
> for ex:
> 
> rules:
> 
> any 10.1.1.1 smtp
> any 10.1.1.2 http
> 
> NAT
> 
> any 216.X.X.10 smtp 10.1.1.1
> any 216.X.X.10 http 10.1.1.2
> 
> if this can work, how do i create the static routes in NT, since that
> outside addres routes differently depending on the service?
> 
> Brian
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================