[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] NAT problems
Title: RE: [FW1] NAT problems
Steve, you may possibly need to add a proxy ARP entry. BTW, what platform are you using?
Jarrett
-----Original Message-----
From: Steve Meeters [mailto:[email protected]]
Sent: Monday, March 12, 2001 21:36
To: [email protected]
Subject: [FW1] NAT problems
We are migrating from a managed firewall service to our own CP firewall and
I have one connection that I'm having trouble making work with the CP.
We have a web site at an external hosting service. Customers can fill out a
form and submit the information to a web server located behind our firewall.
The internal web server uses a private IP address. The hosted web site is
set up to send the submitted information to port 81 on the external
interface of the firewall. The firewall then forwards the information to
port 80 of the internal web server.
I've set up the following rule:
Source = IP address of the hosted web site
Destination = IP address of the external interface of the firewall
Service = Port 81
Action = "">
Log = Long
I've also set up the following static NAT:
Original Packet
Source = IP address of the hosted web site
Destination = IP address of the external interface of the firewall
Service = Port 81
Translated Packet
Source = IP address of the hosted web site
Destination = IP address (private) of the internal web server
Service = Port 80
The firewall logs show the information is being received and accepted on the
external interface and the translation is being performed, however nothing
shows up at the internal web server.
Any suggestions?
Thanks,
Steve
_______________________________________________________
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================