NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SAD question



So, you are wanting to put a device in your DMZ with a REAL IP, not your DMZ
address of 10.x.x.x?

If it were me, I'd put it in with the 10. address, then just NAT it over.
That can be done with 3 rules...one in the Security policy to allow FTP in
to the box (source any, dest ftpbox, service FTP, accept), then two in the
Address Translation section...one to NAT the 10. to the 64. on outbound, and
one for 64. to 10. inbound. (let me know if you need help with these)

Good luck!
Dan Guinn

-----Original Message-----
From: Stephan Dubeau [mailto:[email protected]]
Sent: Thursday, August 08, 2002 10:41 AM
To: [email protected]
Subject: [FW-1] SAD question


S.A.D. (System Administrator by Default = NEWBIE!!!)

Morning all. Is it possible to do this ;

I currently using FW-1 4.1 on NT, I got a DMZ for my ftp server, the address
for this machine is 10.x.x.x, so FW-1 is NATing this to give access to/from
the Internet. I like to add a new machine with a legal IP address 64.x.x.x.
in this DMZ.

How my rules would look like?

Thanks


Stephan Dubeau
Draftsman & IT Manager

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.