[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] nokia ip 120 blocks ip address
I do have a network A with a nokia IP 120 A second network in a different location again a nokia ip 120. I believe that it must be possible that if I telnet into one nokia, that I must be able to ping the other nokia in the remote location like any other public IP address. I can ping any other IP address. >From inside the firewall I can ping and IP on the internet except the public IP of the other nokia. I cannot ftp or telnet to the other nokia from within the lan, but I can do all this from a pc connected by dial up. I can ping the routers public address of the other site. I took all configuration for VPN off the nokias, also I do have only a rule which allows all. After I installed the two nokias I could do all that. What blocks a certain address, where can I reset it. Thanks Wolfgang -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of Roelandts, Guy Sent: 28 February 2003 10:13 To: [email protected] Subject: Re: [FW-1] nokia ip 120 blocks ip address Do I understand correctly that you are trying to ping the External IP address from a remote Nokia ?? This will not pass through the VPN connection and should not work unless configured to be. The outgoing ICMP packet, from one Nokia, could make it because of some default settings in the Global Properties, but the remote Firewall will not accept them and won't this reply. If you try this from the Intranet side of the Nokia, your policy should allow this explicitly too. Met vriendelijke groeten - Bien à vous - Kind regards Guy ROELANDTS EMEA GS Internet Expertise Centre - CCSE-NG Hewlett-Packard Belgium B.V.B.A./S.P.R.L. E-mail : [email protected] Tel: +32(02)729.77.44 (options 3 - 3 - 1) Fax: +32(02)729.77.65 ========================================================== This message may contain confidential and/or proprietary information, and is intended only for the person/entity to whom it was originally addressed. The content of this message may contain private views and opinions which do not constitute a formal disclosure or commitment unless specifically stated. Should you receive this message by mistake please inform the sender immediately. ========================================================== -----Original Message----- From: wolfgang [mailto:[email protected]] Sent: 28 February 2003 10:33 To: [email protected] Subject: [FW-1] nokia ip 120 blocks ip address Can anybody help, please. I can't get a vpn between the two sites, because they can't see each other. I do have 2 nokia 120 each in one site. Firewall 1 ng 3 I created a VPN between the two sites over the internet. Does not work at all, the two sites can't see each other. There is one rule only one a " all all .allowed". So no blocking. But I can't ping from the nokia or inside the firewall to the other nokia external public IP address. I can ping everthing else on the internet. I also can ping from any pc on the internet to the firewalls. What block or filter can that be? Where can I reset this. It blocks access from each other but from nowhere else. Wolfgang ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|