[FW-1] gfb: weird NAT & internal routing behaviour on NG FP2

[gf b <gfbpublic@FW1-NOSPAMHOTMAIL.COM>]

Hi all,

Please can someone advise me on some weird NAT & internal routing behaviour
I'm experiencing with Firewall-1 NG FP2 on redhat linux 7.2.

Basically, when sending outbound mail from an internal host via the
dmz-based smtp relay, the mail reqeuest appears on the mail relay logs as
having come from the ip which the firewall assigns as a hide NAT request for
the internal network.

Surely internal routing on the fw should dictate that these requests appear
with the dmz address of the firewall, not as a NAT address for the internal
subnet?

The result is that we cannot lock down the mail relay to relay only for the
internal network, but have had to add the hide NAT address as well,
otherwise it rejects these requests.

Is there perhaps an internal route I have misconfigured?

Besides the regular internal routes, I've added the route:
<NAT address> route via <fw_internal address>

Does this have other implications?

Kind Regards,

Gabriel

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================