[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW1] what occurs first NAT or RULEBASE (Simple Answer:RULES FIRST, THEN NAT !!)
Simple question, simple anwser !!
RULES FIRST, NAT AFTERWARDS !!
Mark
PS. Although static NAT of ICMP does make this a bit confusing to the unitiated.
Jason Costomiris <[email protected]>
Sent by: [email protected]
21/06/2001 08:01 AST
To: "Shah, Nishith" <[email protected]>
cc: "'Jabal P Raval'" <[email protected]>, "'[email protected]'" <[email protected]>
bcc:
Subject: Re: [FW1] what occurs first NAT or RULEBASE
On Tue, Jun 19, 2001 at 10:17:13AM -0400, Shah, Nishith wrote:
: Always NAT first.
:
: A CCSA question.
Sorry, but you've got it backwards. A packet must match a rule in
your rulebase *BEFORE* it will be NAT'd. Also, NAT happens after
a packet gets routed, but before it gets transmitted, which is why
you need those extra static routes.
:
: -----Original Message-----
: From: Jabal P Raval [mailto:[email protected]]
: Sent: Monday, June 18, 2001 4:53 PM
: To: [email protected]
: Subject: [FW1] what occurs first NAT or RULEBASE
:
:
:
:
: in checkpoint firewall-1 4.1, what occurs first, when a packet comes in,
: rulebase
: checking or address translation?
:
: Thanks/.
:
:
:
: ============================================================================
: ====
: To unsubscribe from this mailing list, please see the instructions at
: http://www.checkpoint.com/services/mailing.html
: ============================================================================
: ====
--
Jason Costomiris <>< | Technologist, geek, human.
jcostom {at} jasons {dot} org | http://www.jasons.org/
Quidquid latine dictum sit, altum viditur.
My account, My opinions.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
=============================================================================== To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================================================
