[FW-1] MS RPC through firewall-1

["De Groot, David (WorldCom)" <david.degroot-eds@FW1-NOSPAMEDS.COM>]

Morning All,

One of my clients wants to access MS Exchange (5.5) through a Firewall-1
(4.1/2000) firewall from PC's using Outlook (98/2000). (Why is a good
question, but alas, that's what they want)

Firstly, is this possible?
Is it reliable?

>From testing with another client, I've found that the MSExchange5.5 service
pre-defined in FW-1 4.1, doesn't quite cut it. It tends to drop a lot of
packets that look like they should match against this service. Adding a new
service for msrpc-locator (tcp 135), and DCE-RPC improves things a little,
but it's still very flaky.

Now, presuming someone has actually got this to work, does it then work with
source and destination NAT?


Thanks,

David
--
David de Groot
Senior Firewall Support
WorldCom Communications Service Delivery, Asia Pacific

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================