Chris,
We have a couple of HP-UX (11) boxes running FTP/etc for us. Although we us FP2.
We don't have any issues.
Have you tried tracing a route from your hp-ux box to the outside world? I realise your fw is probably dropping ICMPs, but at least you can verify it's taking the proper route....
Try telnet'ing from the hp box to fw on an accepted port (CPMI... CPTOPO...) and see if you get an established connection
Stu
-----Original Message-----
From: Chris Beauchamp [mailto:[email protected]]
Sent: 04 December 2002 03:25
To: [email protected]
Subject: [FW-1] Problem with NAT'ed HP-UX Telnet
Hi,
I have an HP-UX server behind NG FP3 using NAT that will not respond to a telnet client.
If I setup a telnet server on Windows 2000 (on the same subnet as the HP-UX server) with the exact same rule/nat settings, it works properly. Also ping (i.e. ICMP-proto) also does not work with HP-UX but fine on the Win2k server.
On both scenarios, the firewall reports accepting the traffic on the correct rule and NAT happening on the correct nat rule. Although I am not the admin on the HP-UX box, I have had the admin verify that the server is setup correctly with the correct IP/Mask/Gateway information. This HP-UX server responds correctly from non-firewalled subnets.
It looks like a NAT issue with this flavour of HP-UX. Does anybody know of special configurations or settings for this HP-UX to allow it to work with a NAT'ed address?
Thanks in advance.
Chris
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
intY has scanned this email for all known viruses (www.inty.com)
|
This email has been checked for all viruses at the internet level by
MailDefender. MailDefender is powered by Sophos anti-virus (www.maildefender.net) |