RE: [FW1] New to FW-1 need help

[Francisco Rebelo <FRebelo@FW1-NOSPAMmillbrookinc.com>]

have created a basic ruleset as stated in the manual i.e.. let all out and
let certain in drop rest, I also created the firewall as an object but I
haven't created a rule for the firewall itself.

-----Original Message-----
From: Tim Parker [mailto:hostmaster@ebworld.com]
Sent: Friday, February 02, 2001 11:07 AM
To: 'Francisco Rebelo'
Subject: RE: [FW1] New to FW-1 need help


Cisco -- you don't mention whether or not you have installed a policy on the
FW.
I believe that you have to put something in by default to allow traffic in
and 
out of the firewall. You also need to create the Firewall as an object in
the
rulebase with the interfaces and IP's.....just a thought.

Tim Parker
EBWorld.com Senior Webmaster


-----Original Message-----
From: Francisco Rebelo [mailto:FRebelo@millbrookinc.com]
Sent: Friday, February 02, 2001 10:58 AM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] New to FW-1 need help



Here's a synopsis:

	Software:  CheckPoint Firewall-1 v.4.1 for Solaris
	Hardware:  Sun Sparc 220R
	Problem:  Firewall doesn't work

I'm new to firewalls and am learning as I go.  I installed firewall-1 and
configured everything I could find (the documentation really bytes).  The
sparc I am using has the onboard Ethernet which is hme0 and a quadfast
Ethernet card (4 ports, qfe0 - 3).  Here is my problem, everything boots
fine no errors or anything.  But when I try to traverse the firewall to hit
my router the packets go through the internal interface but never exit
through the external.  I created the external.if file and blew away the
fwd.h & .hosts files but no luck.  I also am not using NAT, the powers that
be here insist on using published IP's as there internal IP's. I'm not sure
if this is a config problem or a routing problem being that the firewall
(both NICs and internal side of router) are in the same subnet as the rest
of the network.  Does anyone else have this sort of config or can shed any
insight on what I need to do.

Thanks,

Cisco Rebelo
Network Manager
Millbrook Incorporated


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================