NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] IP address overlaps mask.



NG will let you do this

-- Niels

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of
Cepeda, Josh
Sent: 17. september 2001 16:00
To: '[email protected]';
[email protected]
Subject: RE: [FW1] IP address overlaps mask.



Yeah I think firewall one sucks in that respect. You can only specify ip
ranges when using NAT.

-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Thursday, September 13, 2001 1:51 PM
To: [email protected]
Subject: RE: [FW1] IP address overlaps mask.



I did not see that until all of you who replied to this message told me why
I got the message.

I guess I had to split the network object into several objects:

	.4.1.0	255.255.255.0
	.4.2.0	255.255.255.0
	xxx.4.3.0	255.255.255.0
	xxx.4.4.0	255.255.252.0
	xxx.4.8.0	255.255.248.0

It would have made things a lot easier if I could have used an address range
in a rule (Source=Address-range). But it seems like that isn't possible, for
some reason I can't understand.

---
Jørn Yngve Dahl-Stamnes
EDB Teamco, Trondheim
[email protected]

> -----Original Message-----
> From: Good, Donald [mailto:[email protected]]
> Sent: 13. september 2001 18:41
> To: '[email protected]';
> [email protected]
> Subject: RE: [FW1] IP address overlaps mask.
>
>
> If you look at a network mask in binary, it must always be a
> series of 1's
> (the network part) on the left and the remaining bits on the
> right are 0's
> (the host part).  In your example, 255.255.248.0 is
>0.00000000
> When you look at the network number (IP address) of the subnet you are
> defining in binary, it can have 1's and 0's where the network
> mask has 1's,
> but where the network mask has 0's, the IP address must also
> all be 0's.  In
> your case, xxx.4.1.0 is xxxxxxxx.0
> and this shows
> that the 1 in xxx.4.1.0 is out of place.  You might be
> wanting xxx.4.8.0
> which is xxxxxxxx.0, but there many other
> possibilities, too.
>
>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]]
> Sent: Wednesday, September 12, 2001 6:24 AM
> To: [email protected]
> Subject: [FW1] IP address overlaps mask.
>
>
>
> When trying to define a network in FW-1 4.0, i got a warning:
>
> 	Warning: IP address overlaps mask.
>
> I can't figure out why. Am I overlooking somthing here. The
> network object
> looks like this:
>
> Name:	Some_network
> IP Address: xxx.4.1.0
> Net Mask: 255.255.248.0
>
> ---
> Jørn Yngve Dahl-Stamnes
> EDB Teamco, Trondheim
> [email protected]
>
>
> ==============================================================
> ==============
> ====
>      To unsubscribe from this mailing list, please see the
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==============
> ====
>


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.