Re: [FW-1] Lost routes on my IP440

[Bill <wosterman1@FW1-NOSPAMCOMCAST.NET>]

what you are saying does not make too much sense to me.  you indicate that adding static host addresses (TO WHAT?!?) allowed your ping to work.  that sounds like a name resolution problem and not a routing issue.  i would check your dns systems and determine if they have been modified or something happened whereby they lost the settings for these hosts.

 

as far as routing issues....i see your network like this.  you have an internal network which directly or indirectly connects to the firewall.  the firewall has an interface with an ip address on the 64.253.194.128/26 network (or something like that).  your servers are on that segment and you have 2 cisco routers which are your next hop to the internet.  if this is the case, the nokia box can not lose the route to the network unless the interface goes down -- in which case you could not get to the internet.  in any case, the default route would not matter in that case.

 

hope this helps

bill

 

----- Original Message -----

From: Kant Narcisse

To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com

Sent: Thursday, August 08, 2002 9:58 AM

Subject: Re: [FW-1] Lost routes on my IP440

No I didn?t block icmp. I believe I am having a problem between F5 and IP440. Possibly a dynamic ARP issue. The F5 is on the local public network of my external interface of my

Firewalls. If you can shed so light that would be greatly appreciated.

 

 

-----Original Message-----
From: Stephen Raymond [mailto:sraymond@COX.NET]
Sent: Wednesday, August 07, 2002 6:54 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Lost routes on my IP440

 

Could you browse to them?  Maybe you elected to block icmp from those servers?

----- Original Message -----

From: Kant Narcisse

To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com

Sent: Wednesday, August 07, 2002 10:06 AM

Subject: [FW-1] Lost routes on my IP440

 

My Firewall default gateway to the Internet is my (HSRP IP address: 64.253.194.129). I have 6 web servers outside the firewall that have public IP's from that same segment. From my internal network we were always able to ping the following IP's:  64.253.194.160, 161,162,163,164,165. From the outside our customers can hit these IP address but now from our internal network we cannot ping the public IP's. I had to add static host address to allow our folks internally to ping those IP's. I didn't have to do that in the past. It is as if I lost my routes on the firewall. Please advice because I was always been able to ping from both external & internal. The firewall's default gateway is allowing our internal folks to the Internet so why can't it ping the 6 IP's now? Has anyone seen this before?

 

Cheers

 

Kant Narcisse

Tracfone Wireless Inc.

CCSA, CCSE, CCNA, CCNP

CISSP.