[FW-1] NATing an address with no NAT rule

["Richard Muir (Ham)" <Richard.Muir@FW1-NOSPAMSTORTEXT.COM>]

I have a Nokia 650 running FW-1 4.0 (SP5)

I have it set up to do a proxy arp for an external address x.3.9.6  ( The
external interface has an IP address of x.3.9.99 )
It then does a NAT for packets going to x.3.9.6 to a 10.128 address
(internal)

I have allowed icmp / telnet and FTP to from hosts in the x.3.9.0 network to
/ from the internal host.

Ok - I can do a telnet / ftp no problem at all from a host on the x.3.9.0
network to x.3.9.6 and it performs the NAT correctly BUT when i do a ping it
somehow translates the x.3.9.y source address to be 22.3.9.y so the ping
packets have no route back. BUT i have nothing in my NAT rules and have no
idea where the 22. network is coming from.

Anyone have any ideas ??

Richard Muir


Stortext(UK) Limited    phone:  +44 (0) 1698 455 821 (reception)
Caird Centre,           phone:  +44 (0) 1698 455 812 (direct)
Caird Park,             fax:    +44 (0) 1698 455 858
Hamilton,  ML3 0EU      email:  richard.muir@stortext.com
Scotland                        www:    http://www.stortext.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================