NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] NAT problem with FW's external IP address and port selection



Sid Van den Heede wrote:

> I'm trying to setup a firewall on a network where I have one public IP
address
> assigned.  I want to have incoming http requests forwarded to an internal
> machine (private IP address).
>
> I have a rule that resembles this:
>
> Any -> firewall-public-address (http) Accept
>
> and a NAT rule like this:
>
> Any -> firewall-public-address (http) : Original -> internal-IP (Original)
>
> When I try to access the service, the firewall responds by resetting the
> connection request.  The request never appears on the internal interface.
>
> What am I missing

Either you have not routed that public IP address towards your internal
network or, if you use the firewalls external IP address as hide address,
you need to do mapping of the service. It will not work using NAT rules.

Information about that is found here:

http://www.phoneboy.com/faq/0428.html

Regards,

Theo




=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.