[FW1] single static IP for NAT

[Kai Kretschmann <K.Kretschmann@FW1-NOSPAMmit.de>]

Once more and more detailed question:
I reduced my rules to the bare nedded once. I have a rule for incoming http 
which I permit to a internal host which has a private IP.

It is static NATed to the firewalls external interface. I can see the 
accepted packets in the log and they even get translated from the old 
destination (the firewall) to the new one (the internal host). I can see 
via snoop on the external i/f the incoming request but I don't see anything 
going out of the firewall again via snoop on the internal device.

Is there anything I missed with routing, arp etc? I don't think it should 
be needed, as the two interfaces on the firewall are well known to solaris, 
the servers can be pinged happily.

I really need a detailed example of a working very simple net, one real IP, 
a private local net and one service (http) allowed to come in.
Please, :-)


--
"The software said it requires Windows 95 or better, so I installed Linux"

M.I.T newmedia              Tel. 06172-7100-139
Am Zollstock 1              FAX  06172-7100-10
D- 61381 Friedrichsdorf



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================