NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Installation?



On Wed, Dec 26, 2001 at 05:08:26AM -0900, Don Leeper wrote:
> I am having an issue.  I have installed a W2K Box with FW1 4.1.  First I
> hardened the box and changed the registry to 1 for the routing (tcp/ip).
> Installed checkpoint and added a local.arp to the conf folder.  Next I added
> routes so people could hit the web servers.  Here is the problem,  there is
> a routing issue or something I am missing.  From the LAN, I can hit the web
> servers on the dmz.  I can also hit an external IP we have on our same
> subnet x.y.z.71.   The FW is x.y.z.66 and the router from the isp is
> x.y.z.65.  What I can't seem to do is hit anything from outside of that.  I
> can't go to yahoo.com, can't ping anything outside.  Seems like the FW is
> sending it out but not getting nothing back. Does anyone know off hand what
> I may have forgotten?  I really need some help on this one.  In a real rush.
> Thanks in advance...  If I did something wrong please let me know...

        Make a rule that permits everything and logs long.
        Then you'll see exactly what you are (and are not) getting.

        Also, put a PC in place of the firewall and eliminate any
        upstream gotchas like routing. If the PC accesses everything
        OK then ISP and routers are eliminated.

        Run a sniffer (www.ethereal.com)

                                        alan

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.