| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] SAD question
- To: [email protected]
- Subject: Re: [FW-1] SAD question
- From: Lars Troen <[email protected]>
- Date: Thu, 8 Aug 2002 21:42:55 +0200
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcI/Aginnl36puiDR663aKK/liRy/AAEFW4w
- Thread-topic: [FW-1] SAD question
Stephan,
You would need rules like these:
Any - 64.x.x.x - Some service - Accept - Long
NAT:
Any - 64.x.x.x - Any - orig - 10.x.x.x - orig
Routing:
you need a route like this:
route add -p 64.x.x.x mask 255.255.255.255 10.x.x.x
And you need to include both the internal and external addresses in your anti-spoofing setup on the dmz interface.
Lars
> -----Original Message-----
> From: Stephan Dubeau [mailto:[email protected]]
> Sent: Thursday, August 08, 2002 16:41
> To: [email protected]
> Subject: [FW-1] SAD question
>
>
> S.A.D. (System Administrator by Default = NEWBIE!!!)
>
> Morning all. Is it possible to do this ;
>
> I currently using FW-1 4.1 on NT, I got a DMZ for my ftp
> server, the address
> for this machine is 10.x.x.x, so FW-1 is NATing this to give
> access to/from
> the Internet. I like to add a new machine with a legal IP
> address 64.x.x.x.
> in this DMZ.
>
> How my rules would look like?
>
> Thanks
>
>
> Stephan Dubeau
> Draftsman & IT Manager
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
