NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] site cant be seen using hide mode



Lito,

   When using HIDE Nat, your internal sites will never be reachable from
 the outside world.

   When using STATIC Nat, you must configure proxy arping, so the Firewall
 knows he must answer these requests. What will be reachable by the outside
 world depends only from your security policy in place on the Firewall,
 if you have an Apache Web server you should only open port 80 and maybe
443.

Met vriendelijke groeten - Bien à vous - Kind regards

Guy ROELANDTS
EMEA GS Internet Expertise Centre - CCSA & CCSE
Compaq Software Engineer - Belgium
E-mail : [email protected]
Tel: +32(02)729.77.44 (options  3 - 3 - 1)
Fax: +32(02)729.77.65

=====================================================================
This message may contain confidential and/or proprietary information,
and is intended only for the person/entity to whom it was originally
addressed. The content of this message may contain private views and
opinions which do not constitute a formal disclosure or commitment
unless specifically stated. Should you receive this message by mistake
please inform the sender immediately.
=====================================================================



-----Original Message-----
From: lito lampitoc [mailto:[email protected]]
Sent: Wednesday, November 14, 2001 10:59 AM
To: [email protected]
Subject: [FW-1] site cant be seen using hide mode


Why is it when a hosted site is accessed from the "NAT"ted local
network, these public IPs cannot be seen or ping , but is only reachable

from the outside. Is it possible that my FW-1 firewall is blocking it or
the
Apache itself has a problem, if it is Apache then why is it accessible
from the outside? I've tried changing hide mode to static mode  and
that's
the only time it is visible, of course can't browse the internet since
the requested site cannot respond to  the  internal networks "invalid"
IP addresses.

tia,

Lito

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.