NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Question on a Web Server Rule



If the Ip addresses are contiguious you could use a subnet definition.
Otherwise you have to specify each machine.




-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Larry Pingree
Sr. Security Engineer/Check Point Instructor
CCSA, CCSE, CCSI, ICE, ICI, NSA

Website: http://www.SiegeWorks.com <http://www.siegeworks.com/>
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of Brad
Merluzzi
Sent: Friday, August 17, 2001 11:31 AM
To: '[email protected]'
Subject: [FW1] Question on a Web Server Rule



Hi,

I Addresses that are being used for serving various web sites off of the
box.

Upon going through my rulebase and cleaning it up, i was using the excellent
article from Lance Spitzner have a question on setting up a rule to access
our Web Servers.  We have two boxes that are bound with a multitude of IP
(http://www.enteract.com/~lspitz/rules.html)

In this example, he sets up a Desyination object as a web server with an IP
Address assigned to it.  This makes total sense if you only have one web
site to send traffic to.

My question is this, If I add a rule like this, will IP's that are bound to
the Server be accessible?  I obviously don't want to add a rule for each
site.

Does anyone have any ideas?  Any help would be grateful.

I'm new at this, and trying to find 'theory' articles on the Checkpoint is
tough.  Does anyone have any links to good firewall 'theory' sites

Thanks in advance,

--Brad
[email protected]


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.