[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Preventing translation of source addresses of packets going to ex tranet segment
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Easy as pie, just create a NAT rule in the ORIGINAL side of your NAT rule base as follows; ORIGINAL TRANSLATED Source Destination Source Destination Internal_Net Extranet ANY ANY This basically says to the firewall that when your internal net talks to the extranet keep it's original IP. - -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Andy Fernandes Sent: Friday, October 19, 2001 8:28 AM To: [email protected] Subject: [FW-1] Preventing translation of source addresses of packets going to ex tranet segment Hello all: We are NATing internal private addresses when they go out to the Internet through the external interface of our Checkpoint firewall. Source addresses of packets going to devices on our extranet segment on the extranet interface are also getting translated. How do I prevent this from happening? I want to retain the original private source addresses of the packets when they hit the extranet. Andy =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== -----BEGIN PGP SIGNATURE----- Version: PGP Personal Security 7.0.3 iQA/AwUBO9Ah15F+aDWIsHBhEQLaKwCg6fNTeejG7p0ehh1wlqSMyReuuSIAnAhO sN1OYaQs1lUTb/vOisy33D5j =o3HG -----END PGP SIGNATURE----- =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
|