Re: [FW-1] New on FW NG. NATting of routable address

[Bill Osterman <wosterman1@FW1-NOSPAMCOMCAST.NET>]

I have never done this setup with an NT box, but from a routing standpoint
there would be no problem if, as I think you stated, this is your company's
public address space and not somebody else's.

>From a security standpoint, I would recommend not using those ip addresses
on the machines, but using NAT instead.  Unless there is a reason that some
or all of them must continue to have registered ip addresses on their
machines.  There is the added benefit of being able to sell the ip range if
you do not really need it.

----- Original Message -----
From: "Kim Longenbaugh" <kiml@COLONIALSAVINGS.COM>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Thursday, May 09, 2002 8:11 AM
Subject: Re: [FW-1] New on FW NG. NATting of routable address


> One glaring issue comes to mind if I understand your diagram right.  You
would be bypassing your firewall altogether through the 107.151 network.
>
> >>> randyb@TRENDS.COM.PH 05/07/02 02:47PM >>>
> Hi to all,
>
> I have a client setup like this one:
>
> Internet--------FW-1(NG)------Trusted
> LAN(192.168.x.x)--------Router---------107.151.x.x
>
> Im doing NAT on trusted. The network after the router is 107.151.x.x is
> i believe a routable ip on the internet. Would there be any issue on the
> firewall if the 107 network goes to the internet? Platform NT.
>
> Thanks in advance,
> Randy
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================