NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] FW1 as a bridge




That's right. Even that, you may use a linux based box with
"proxy-arp" feature enabled on the operating system (linux),
and reach some "transparent" functionality. Be careful
anyway, since this kind of configuration is not supported AFAIK,
and it also may be vulnerable to some layer 2 attacks like
ARP spoofing...


HTH too... :-)

Best wishes.


On Thu, 27 Sep 2001, Dan Hitchcock wrote:

> FW1, unfortunately, does not work in bridge mode.  Some appliance-based
> firewalls support this functionality, but FW1 depends on an IP address being
> bound to each adapter used for traffic control.  This is more a limitation
> of the underlying operating system than a limitation of FW1.
>
> HTH
>
> Dan
>
> -----Original Message-----
> From: J�rg Oertel [mailto:[email protected]]
> Sent: Thursday, September 27, 2001 8:44 AM
> Cc: '[email protected]'
> Subject: Re: [FW1] FW1 as a bridge
>
>
>
> > "Prieto Mart�nez, Javier" schrieb:
> >
> > Hello.
> >
> > I want to deploy and FW1 based solution in my network. The point is
> > that I don't want the FW1 host to have an IP address, as I want it to
> > work mostly like a bridge.
>
> Hi Javier,
>
> I'm sure you'll want to give the machine an IP address, and more than
> just one. FW1 is a firewall designed for filtering IP traffic.
>
>
> Mit freundlichen Gruessen/Kind Regards,
> J�rg Oertel




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.