NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] Connections from dmz to dmz-translated address fail.



 I have :

       - NT4. Sp6a
       - NG FP3 + HF1

 This is one of those questions when using Fw-1 in the context
 as in 'this surely worked before but now it doesn't anymore'.

 I am having a classical dmz with boxes using private address
 scheme and nat-ed towards Internet getting valid ip when leaving
 the FW so to speak.

 In NG FP1 I could for instance telnet from dmz-x to it's nat-ed
 address.

 Now in FP3 this hangs. Packet seems dropped by the fw.
 Nothing obvious in the logs, sec. policy allows it.

 Any reason why ? Bastion properties ? SmartDefense properties ?

 Sec. policy was not changed between FP1 and FP3 upgrade.

 Not needing this specifically but it was handy when I used
 'dnswalk' on dmz box to regulary test my DNS server.

 Thx for all feedback.

 M.

--

 'Time is a consequence of Matter thus
 General Relativity is a direct consequence of QM
 (M.E. Mar 2002)

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.