Re: [FW1] Multicast on Firewall-1

[Julian Hayward <Julian.Hayward@FW1-NOSPAMreuters.com>]

Hello Jenny,

I'm not sure about Firewall-1 4.0 on Solaris - I have configured multicast IP
traffic through a Firewall-1 4.1 SP3 on Windows 2000.

1. Configure the server to route multicast IP traffic - before loading a
security policy on it
2. Create a network object  (of type network) whose IP address is 224.0.0.0 with
a netmask of 240.0.0.0 (all legal multicast addresses), associate this object
with your FW internel and external interfaces if you have set up your FW to
prevent address spoofing.
3. Create a network object (type Workstation) for the server transmitting the
multicast traffic and the PC(s) that will be receiving it.
4. Now add 2 rules to your rulebase:-

Source         Multicast Server
Destination    Multicast Network Object (Type Network)
Service        Any
Action         Accept
Track          Long

Source         PC(s)
Destination    Multicast Server
Service        HTTP
Action         Accept
Track          Long

5. You can modify the Destination address on the first rule by looking at your
log and finding out what the multicast IP destination address is.
6. You can also modfiy the Service on the first rule by looking at the ports in
use and only allowing these through.

Regards,

Julian Hayward



|--------+-------------------------------->
|        |          CATHERALL JENNY       |
|        |          <JENNY.CATHERALL@forti|
|        |          sbank.com>            |
|        |                                |
|        |          03/05/2001 10:01      |
|        |                                |
|--------+-------------------------------->
  >----------------------------------------------------------------------------|
  |                                                                            |
  |       To:     "'fw-1-mailinglist@lists.us.checkpoint.com'"                 |
  |       <fw-1-mailinglist@beethoven.us.checkpoint.com>                       |
  |       cc:     (bcc: Julian Hayward/LON/GB/Reuters)                         |
  |       Subject:     [FW1] Multicast on Firewall-1                           |
  |       Header:      Internal Use Only                                       |
  >----------------------------------------------------------------------------|






Hallo,

I am currently trying to configure Firewall-1 4.0 on Solaris to allow
multicast from a server to clients. Has anyone managed this successfully as
there is little information available from Checkpoint
themselves.

Regards,

Jenny Catherall



-----------------------------------------------------------------
        Visit our Internet site at http://www.reuters.com

Any views expressed in this message are those of  the  individual
sender,  except  where  the sender specifically states them to be
the views of Reuters Ltd.

Hallo,

 

I am currently trying to configure Firewall-1 4.0 on Solaris to allow

multicast from a server to clients. Has anyone managed this successfully as

there is little information available from Checkpoint

themselves.

 

Regards,

 

Jenny Catherall