NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] Different NAT on different interfaces on Solaris



Howdy,


I have a firewall with multiple interfaces:


                 internet
                    |
                    |
                ---------
                |       |
        DMZ ----|       |--- net A
                |       |
                ---------
                    |
                    |
                  net B

I want traffic destined for a certain ip-address to
be forwarded to a host on the DMZ when it originates on the
Internet or to a host on net B when it originates on net A.
I know how to set up the rules, however FW-1 requires me to add a 
few routes to the routing table on the underlaying OS (Solaris):
I need to create a host route that forwards traffic to the fake
address to the new address.  I need to do this for both NAT rules:

  route add host <fake-ip> <dmz-ip> 
  route add host <fake-ip> <net-B-ip>

This is ofcourse not possible.

Any idea how I can do this?

Nico

---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry." 
---------------------------------------------------------
Nico De Ranter
Sony Service Center (SDCE/NEE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: [email protected]


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.