Re:RE: [FW1] Static Nat Problem

[Eudres Ernesto dos Santos <eudres@FW1-NOSPAMuol.com.br>]

Hi,

In my case, it is what is happened. The packets are being dropped by rule 0.

Regards,

Eudres Ernesto
Rio de Janeiro, Brazil

>>
>Have you configured anti-spoofing in the interfaces tab of the firewall
>object?  If so you may need to modify that.  Turn on "Log Implied Rules" in
>properties and see if any packets are being dropped at rule 0 for the NAT or
>workstation object.
>
>
>
>-----Original Message-----
>From: Matt Duval
>To: fw-1-mailinglist@lists.us.checkpoint.com
>Sent: 2/7/01 5:31 PM
>Subject: [FW1] Static Nat Problem
>
>Hello all, and thanks in advance. My problem is this. I am trying to set
>up a static NAT for a server. I set up the server as a workstation, set
>it to static NAT.
>On the Aix/FW box I added arp -s ether a.b.c.d MAC. address pub, I then
>did a route add a.b.c.d  w.x.y.z 1. I also made sure to do a no -o
>ipforwarding=1. The server is able to get out and is correctly NAT'ed,
>but I am unable to connect to it from the outside. It is advertising the
>correct arp, as I have pined the external FW int. and the NAT ip and
>both show the same MAC. So this must be a routing problem..but a netstat
>-r shows the route a.b.c.d   w.x.y.z  UGH
>
>I have fw-1 4.1 sp3 on Aix 4.3.3 
>
>Thanks,
>
>Matt Duval
>
>
>
>================================================================================
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>================================================================================
>
-------------------------
www.galeradoccaa.cjb.net
ICQ 16095223 / 11086241


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================