[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] AW: [FW-1] web server on secure lan
Title: AW: [FW-1] web server on secure lan
If it's a Web server, and they only need HTTP access, setting up a proxy outside of the firewall would be an option. Actually, something like a SOCKS proxy might be an option for all kinds of access. Packets would go from the internal clients through the firewall (NATed or not, doesn't really matter), through the proxy, back into the internal network, NATed, to the server, and the same way mirrored to get back to the client.
-&
> -----Ursprüngliche Nachricht-----
> Von: Richard Marshall [mailto:[email protected]]
> Gesendet am: Freitag, 14. Juni 2002 17:56
> An: [email protected]
> Betreff: [FW-1] web server on secure lan
>
> Hi,
>
> I'm after some advice/confirmation.
>
> I have had to setup a test environment webserver on an
> internal lan with
> a NAT to a public IP. Public access now works without problem
> (thanks to
> some pointers from this list).
>
> However, the tech guys that have requested the test env.
> requested that
> they should be able to access the public natted ip
> themselves. i.e. out
> from the lan via a hide address and back into the lan via the nat
> address of the webserver. I was sceptical that it was possible (and am
> not sure why they feel it's necessary). Having spent the day trying
> every combination of nat rules, static routes, etc. that I
> can think of
> I have come to the conclusion it's not possible.
>
> Am I right in thinking this, or is it possible after all?
>
> I am running fw-4.1 sp3 on nokia (it's a distributed
> environment, but it
> is only the lan behind the firewall in question that can't access the
> public IP address.)
>
> thanks in advance
>
> rich
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
