RE: [FW1] IP address overlaps mask.

["Cepeda, Josh" <josh.cepeda@FW1-NOSPAMxo.com>]

Yeah I think firewall one sucks in that respect. You can only specify ip
ranges when using NAT.

-----Original Message-----
From: Jorn.Dahl-Stamnes@novit.no [mailto:Jorn.Dahl-Stamnes@novit.no]
Sent: Thursday, September 13, 2001 1:51 PM
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: RE: [FW1] IP address overlaps mask.



I did not see that until all of you who replied to this message told me why
I got the message.

I guess I had to split the network object into several objects:

	.4.1.0	255.255.255.0
	.4.2.0	255.255.255.0
	xxx.4.3.0	255.255.255.0
	xxx.4.4.0	255.255.252.0
	xxx.4.8.0	255.255.248.0

It would have made things a lot easier if I could have used an address range
in a rule (Source=Address-range). But it seems like that isn't possible, for
some reason I can't understand.

---
Jørn Yngve Dahl-Stamnes
EDB Teamco, Trondheim
Jorn.Dahl-Stamnes@novit.no 

> -----Original Message-----
> From: Good, Donald [mailto:dgood@aha.org]
> Sent: 13. september 2001 18:41
> To: 'Jorn.Dahl-Stamnes@novit.no';
> fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: RE: [FW1] IP address overlaps mask.
> 
> 
> If you look at a network mask in binary, it must always be a 
> series of 1's
> (the network part) on the left and the remaining bits on the 
> right are 0's
> (the host part).  In your example, 255.255.248.0 is
>0.00000000
> When you look at the network number (IP address) of the subnet you are
> defining in binary, it can have 1's and 0's where the network 
> mask has 1's,
> but where the network mask has 0's, the IP address must also 
> all be 0's.  In
> your case, xxx.4.1.0 is xxxxxxxx.0 
> and this shows
> that the 1 in xxx.4.1.0 is out of place.  You might be 
> wanting xxx.4.8.0
> which is xxxxxxxx.0, but there many other
> possibilities, too.
> 
> 
> -----Original Message-----
> From: Jorn.Dahl-Stamnes@novit.no [mailto:Jorn.Dahl-Stamnes@novit.no]
> Sent: Wednesday, September 12, 2001 6:24 AM
> To: fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: [FW1] IP address overlaps mask.
> 
> 
> 
> When trying to define a network in FW-1 4.0, i got a warning:
> 
> 	Warning: IP address overlaps mask.
> 
> I can't figure out why. Am I overlooking somthing here. The 
> network object
> looks like this:
> 
> Name:	Some_network
> IP Address: xxx.4.1.0
> Net Mask: 255.255.248.0
> 
> ---
> Jørn Yngve Dahl-Stamnes
> EDB Teamco, Trondheim
> Jorn.Dahl-Stamnes@novit.no 
> 
> 
> ==============================================================
> ==============
> ====
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==============
> ====
> 


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================