Is the firewall doing Hide NAT or Static NAT?.
If the SNMP server is behind the firewall with an invalid address, you need
to double check the NAT rules. If the SNMP server is translated with static
NAT make sure the host sending the snmp packets is using the correct IP
address (Static translated IP address).
Carlos Roque
Network Consultant
CCSA
GlobalNetwork Technology Services, L.A.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of Rafael
Vida
Sent: Wednesday, April 10, 2002 3:20 AM
To: [email protected]
Subject: [FW-1] NAT of snmp packets
Hi.
We have a problem with NAT and snmp packets.
There are a lot of snmp packets (20%) that the firewall accepts, but it
doesn´t the NAT translation.
When a snmp packet arrives to the firewall, the destination address is
false, the firewall accepts the packet, and when this packets arrive to
the destination host, there are a few packets with the invalid address.
Do you know this problem?
Thanks in advance.
Rafael Vida
Security Manager
CEI, Ing. OSS.
Telefónica Data España
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================