[FW1] Firewall-1 DMZ configuration.

[Paul Messer <paul.messer@FW1-NOSPAMtandf.co.uk>]

Dear All,

we here have a problem...in that we have no DMZ currently....

I want to move all our externally facing www and ftp etc servers to a DMZ 
and I'm considering the Nokia FW platform to do it with...currently we're 
running it on an NT server.

All the FTP and www servers have the same class c network address as the 
rest of our network i.e .www is 111.111.111.111 my machine is 
111.111.111.67...is it possible to use NAT to ip address these boxes i.e. 
10.10.50.111 and so on whilst still showing their real address to the 
outside world even though the network address shown would be normally 
routed on to our network...

e.g...

FW-1 with 3 NIC's ----> NAT 111.111.111.111 ----> 10.10.50.111

Also would it be possible / prudent to move the DNS / Mail server to the 
DMZ using the same NAT even though it's a POP3 mail server which ppl would 
connect to internally to collect mail.

I'm sorry if it's a really stupid question but we've never done it before 
and I've only ever dabbled with NAT.

Thanks in advance.



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================