Re: [FW-1] Installation?

Subject: Re: [FW-1] Installation?

From: Matthias Leu <[email protected]>

Date: Wed, 26 Dec 2001 16:22:24 +0100

Organization: AERAsec Network Services and Security GmbH

References: <407F925F5F97D311818A00A0C9ACE7C8F3676E@MCMXNG>

Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Hi,
the file local.arp belongs into the directory $FWDIR\state - give it a try after a restart of the Firewall.
If this doesn't work, check long logging and the NAT-entries in the log. Maybe a sniffer will also help finding out if the translated packets leave the Firewall to the Internet.
Hope it helps,
best regards,
Matthias

Don Leeper wrote:

I am having an issue.I have installed a W2K Box with FW1 4.1.First I hardened the box and changed the registry to 1 for the routing (tcp/ip).Installed checkpoint and added a local.arp to the conf folder.Next I added routes so people could hit the web servers.Here is the problem,there is a routing issue or something I am missing.From the LAN, I can hit the web servers on the dmz.I can also hit an external IP we have on our same subnet x.y.z.71.The FW is x.y.z.66 and the router from the isp is x.y.z.65.What I can't seem to do is hit anything from outside of that.I can't go to yahoo.com, can't ping anything outside.Seems like the FW is sending it out but not getting nothing back. Does anyone know off hand what I may have forgotten?I really need some help on this one.In a real rush.Thanks in advance...If I did something wrong please let me know...

Don