[FW-1] NAT problem with FW's external IP address and port selection

[Sid Van den Heede <sidv@FW1-NOSPAMOPENTEXT.COM>]

I'm trying to setup a firewall on a network where I have one public IP address
assigned.  I want to have incoming http requests forwarded to an internal
machine (private IP address).

I have a rule that resembles this:

Any -> firewall-public-address (http) Accept

and a NAT rule like this:

Any -> firewall-public-address (http) : Original -> internal-IP (Original)

When I try to access the service, the firewall responds by resetting the
connection request.  The request never appears on the internal interface.

What am I missing?

------------------------------------------------------------------
Sid Van den Heede               Open Text Corporation185 Columbia Street West(fax)           Waterloo, Ontario, Canada  N2L 5Z5
sidv@opentext.com               OpenPGP key available on www.keyserver.net

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================