Re: [FW-1] NAT problem with FW's external IP address and port selection

["@Comcast" <wosterman1@FW1-NOSPAMCOMCAST.NET>]

I do not think you can do a static NAT with the actual address of the FW.

Also, in your original email you wrote the NAT rule for only one direction.
If you specify the return traffic in the NAT rule and put in a host static
route to redirect the inbound traffic to the internal host, it MAY work.  I
would be surprised though.

----- Original Message -----
From: "Ilker Gokhan" <ilker.gokhan@INVESTA.COM.TR>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Monday, April 15, 2002 9:06 AM
Subject: Re: [FW-1] NAT problem with FW's external IP address and port
selection


> Sid Van den Heede wrote:
>
> > I'm trying to setup a firewall on a network where I have one public IP
address
> > assigned.  I want to have incoming http requests forwarded to an
internal
> > machine (private IP address).
> >
> > I have a rule that resembles this:
> >
> > Any -> firewall-public-address (http) Accept
> >
> > and a NAT rule like this:
> >
> > Any -> firewall-public-address (http) : Original -> internal-IP
(Original)
> >
> > When I try to access the service, the firewall responds by resetting the
> > connection request.  The request never appears on the internal
interface.
> >
> > What am I missing?
>
> May be you have an IP spoofing problem? or routing problem..Please check
>   both of these situation.
>
> Best regards,
> Ilker G.
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================