RE: [FW1] NAT problems

[Steve Meeters <Steve_Meeters@FW1-NOSPAMexcite.com>]

We're running CP 4.1 SP1 on AIX 4.3.2

Steve


On Tue, 13 Mar 2001 00:28:37 -0500, Jarrett Goetz wrote:

>  Steve, you may possibly need to add a proxy ARP entry.  BTW, what
platform
>  are you using?
>  
>  Jarrett 
>  
>  -----Original Message-----
>  From: Steve Meeters [mailto:Steve_Meeters@excite.com]
>  Sent: Monday, March 12, 2001 21:36
>  To: fw-1-mailinglist@lists.us.checkpoint.com
>  Subject: [FW1] NAT problems
>  
>  
>  
>  
>  We are migrating from a managed firewall service to our own CP firewall
and
>  I have one connection that I'm having trouble making work with the CP.
>  
>  We have a web site at an external hosting service. Customers can fill out
a
>  form and submit the information to a web server located behind our
firewall.
>  The internal web server uses a private IP address. The hosted web site is
>  set up to send the submitted information to port 81 on the external
>  interface of the firewall. The firewall then forwards the information to
>  port 80 of the internal web server. 
>  
>  I've set up the following rule:
>  
>  Source = IP address of the hosted web site
>  Destination = IP address of the external interface of the firewall
>  Service = Port 81
>  Action = Accept
>  Log = Long
>  
>  I've also set up the following static NAT:
>  
>  Original Packet
>  Source = IP address of the hosted web site
>  Destination = IP address of the external interface of the firewall 
>  Service = Port 81
>  
>  Translated Packet
>  Source = IP address of the hosted web site
>  Destination = IP address (private) of the internal web server
>  Service = Port 80
>  
>  The firewall logs show the information is being received and accepted on
the
>  external interface and the translation is being performed, however
nothing
>  shows up at the internal web server.
>  
>  Any suggestions?
>  
>  Thanks,
>  Steve
>  
>  
>  
>  
>  
>  _______________________________________________________
>  Send a cool gift with your E-Card
>  http://www.bluemountain.com/giftcenter/
>  
>  
>  
>  
> 
============================================================================
>  ====
>       To unsubscribe from this mailing list, please see the instructions
at
>                 http://www.checkpoint.com/services/mailing.html
> 
============================================================================
>  ====





_______________________________________________________
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================