Re: [FW-1] Static NAT and Port Translation

[Don <don@FW1-NOSPAMBLACKSUN.ORG>]

> I currently have an internal host using a private address 192.168.1.1. I
> have this host setup to use Static NAT to the external address
> 209.124.222.1. It appears as though the firewall is translating the port
> numbers as well as the IP address. Is this normal?  If I capture packets on
> the dmz segment and issue an snmpget command from my internal host to an
> internet host I see the translated IP address but the SNMP ports it's using
> are 55000, 56,000 etc.  Is there a way to make it use the original port
> (161) and not translate that?
If you look in your objects.c you may find the option you are looking for.
I do not know if such an option exists, but that would be where to check.

-Don

>

> Thanks.
>
> Leo Badinger
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================