NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW1] CVP and relaying



Put a rule to not NAT before your NAT rules.

--- John Hardly <[email protected]> wrote:
> 
> Hi everybody,
> I discovered that my mail server (212.x.x.18 on my
> DMZ) became an Open Mail Relay
> when I installed a CVP with FW-1 4.1.
> Every smtp connection from the FW-1 to the mail
> server appears to come from 
> 212.x.x.17 (my localnet is nated behind 212.x.x.17
> wich is the IP address of
> DMZ interface on my Firewall).
>  Even if the SMTP connection come from outside my
> company, the mail server sees only
> that it comes from 212.x.x.17.
> ****************
> May  2 13:31:15 My_mail_server sendmail[9388]:
> NAA09388:
>
from=<[email protected]>,
> size=2475,
> class=-60, pri=140475, nrcpts=1,
> msgid=<[email protected]>, 
> proto=SMTP, relay=IDENT:[email protected]
> [212.x.x.17]
>             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^    
> ^^^^^^^^^^^
>               
> ******************
> 
>  I'd like to know how to set up the firewall (with
> CVP) in order that 
> the firewall let the mail server know the IP address
> of the SMTP connection 
> instead of  the IP of the Fw interface (212.x.x.17).
>  The CVP server  (VirusWall ) is installed on
> another machine (212.x.x.19)
> -- 
> John Hardly
> E-mail : john (at) iav (dot) ac (dot) ma
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.