[FW1] NAT & spoofing

["Iztok Umek" <iumek@FW1-NOSPAMelogex.com>]

I just configured FW-1 4.1 SP3 (RedHat 6.2).

I did use "Hide" NAT for all the network with exception of host for
Exchange OWA which has different "Static" NAT.

I did add route and arp for that external address. In order to work I
first had to remove spoofing protection on the FW-1 internal interface. 

Figuring out that this is not good I was playing around and did next
thing:

On internal interface instead of "This net" I had to use "Specific",
where I put "Internal Network" + "External IP of NATed machine" (in one
group).

Is this normal way of doing it or did I do something wrong with route
and arp so I had to "correct" it with spoofing rules.

Regards,
	Iztok


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================