NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] multiple external interfaces on firewall



Huh, that's strange. When I tried to define a second as others I got
an error message. I don't remember whether I got that message when changing
the object or when applying the policy however. I'll try again :-)

Nico


On Thu, Mar 07, 2002 at 06:52:44AM -0800, Joe Delsol wrote:
> What keeps you from defining two as others? I just looked and your
> correct that anti spoofing was not turned on. So I set two interfaces to
> others and the others to specific and this net. No errors on the closing
> of the object, but I didn't push it out due to other reasons.
>
>     Joe
>
> Nico De Ranter wrote:
>
> >That will get you into trouble however when defining anti-spoofing rules
> >since there can only be 1 interface defined as 'others'. (Tried that wit
> h
> >an unlimited license)
> >
> >Nico
> >
> >On Wed, Mar 06, 2002 at 07:51:08PM -0800, Joe Delsol wrote:
> >
> >>Yes, with an unlimited license there is no external.if and you can
> >>configure a primary and secondary default route.
> >>    Joe
> >>
> >>Marques, Ricardo wrote:
> >>
> >>>I.
> >>>
> >>>In my experience i think that is not possible to have more than one ex
> >>>
> >ter
> >
> >>>nal
> >>>interface in the firewall-1. One of the interfaces is external and all
> >>>
> > th
> >
> >>>e
> >>>others are internal, because you have only one "default gateway", all
> >>>
> >the
> >
> >>>traffic that is not internal is sent to that gateway.
> >>>
> >>>This is my opinion, but if someone else knows how to do it, i'll aprec
> >>>
> >iat
> >
> >>>e
> >>>the information.
> >>>
> >>>Ricardo Marques
> >>>
> >>>-----Original Message-----
> >>>From: Daniel Johnson [mailto:[email protected]]
> >>>Sent: quarta-feira, 6 de Março de 2002 16:11
> >>>To: [email protected]
> >>>Subject: [FW-1] multiple external interfaces on firewall
> >>>
> >>>
> >>>Just a sanity check....
> >>>
> >>>Is there ever a reason to implement multiple external
> >>>interfaces (for internet access) on the same firewall?
> >>>
> >>>If so, how would one go about routing specific address
> >>>ranges out the desired interface?
> >>>
> >>>Thanks
> >>>
> >>>Danny
> >>>
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>To set vacation, Out Of Office, or away messages,
> >>>send an email to [email protected]
> >>>in the BODY of the email add:
> >>>set fw-1-mailinglist nomail
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>To unsubscribe from this mailing list,
> >>>please see the instructions at
> >>>http://www.checkpoint.com/services/mailing.html
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>If you have any questions on how to change your
> >>>subscription options, email
> >>>[email protected]
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>To set vacation, Out Of Office, or away messages,
> >>>send an email to [email protected]
> >>>in the BODY of the email add:
> >>>set fw-1-mailinglist nomail
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>To unsubscribe from this mailing list,
> >>>please see the instructions at
> >>>http://www.checkpoint.com/services/mailing.html
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>If you have any questions on how to change your
> >>>subscription options, email
> >>>[email protected]
> >>>========================
> >>>
> >=
> >
> >>>========================
> >>>
> >>========================
> >>
> >========================
> =
> >
> >>To set vacation, Out Of Office, or away messages,
> >>send an email to [email protected]
> >>in the BODY of the email add:
> >>set fw-1-mailinglist nomail
> >>========================
> >>
> >========================
> =
> >
> >>To unsubscribe from this mailing list,
> >>please see the instructions at
> >>http://www.checkpoint.com/services/mailing.html
> >>========================
> >>
> >========================
> =
> >
> >>If you have any questions on how to change your
> >>subscription options, email
> >>[email protected]
> >>========================
> >>
> >========================
> =
> >---------------------------------------------------------
> > "It has been said that there are only two businesses that
> >  refer to customers as users: illegal drug trade and
> >               the computer industry."
> >---------------------------------------------------------
> >Nico De Ranter
> >Sony Service Center (SDCE/VPE-B)
> >Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
> >1130 Brussel (Bruxelles), Belgium, Europe, Earth
> >Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
> >e-mail: [email protected]
> >
> >========================
> =
> >========================
> >To set vacation, Out Of Office, or away messages,
> >send an email to [email protected]
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >========================
> =
> >========================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >========================
> =
> >========================
> >If you have any questions on how to change your
> >subscription options, email
> >[email protected]
> >========================
> =
> >========================
> >
>
---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Sony Service Center (SDCE/VPE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: [email protected]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.