|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Routing Question
Strictly speaking traceroute....the indications you are talking about usually indicate that the last host to respond does not know how to GOTO the next hop (which looks to be untrue in your case as the second routing statement says) OR can not get to the next hop because it is unavailable, blocked, etc. OR that the next hop beyond the last response does not know how to get BACK to the source ip (network). if the last part is true, make sure you are accounting for any NAT. of course, the firewall may be blocking it as well. ----- Original Message ----- From: "Don" <[email protected]> To: <[email protected]> Sent: Tuesday, May 21, 2002 8:40 AM Subject: Re: [FW-1] Routing Question > > Normal route statements on the routers, nothing special. > > > > On 10.10.0.1: > > - 10.30.0.0/16 [1/0] via 10.10.0.2 > > > > On 10.10.0.2: > > - 10.30.0.0/16 [1/0] via 10.20.0.254 > > > > Doing a traceroute to an ip in the dmz from 10.10.0.1 or anything behind it > > will > > only get as far as 10.10.0.2 and then time out. > Does your rule set allow ICMP to the firewall and to systems behind it? > > What exactly does your rule set say? > > -Don > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
