Re: [FW-1] Traffic between subnets - problem

[Robson Gomes <robson@FW1-NOSPAMMEDIDATA.COM.BR>]

Jonathan

You need to use specific NAT rules. If you use the NAT option on the Object
you get NAT
on regardless of the destination, Internet or DMZ, like is your problem.

To solve this:
1 -  Remove the NAT configuration on the objects from the internal network.
2 - Add a NAT rule from the internal network to the Internet on the NAT
rule base.
That way the traffic from the internal network to the dmz will not be
Nated.
To qualify the Internet on a Nat Rule use a group called Known, where you
put all your internal
and DMZ networks. Negate this group on the Nat rule on the destination
field.

Robson Gomes
Medidata Informática S.A.
55 21 25463734

O conteúdo desta mensagem (e o de seus eventuais anexos) é de exclusivo
interesse do destinatário acima indicado e pode conter informação
confidencial e/ou proprietária, que não deve ser copiada ou divulgada sem o
consentimento expresso da Medidata Informatica S/A.. Em caso de recepção
por pessoa diversa do destinatário, a mensagem e seus respectivos anexos
deverão ser destruídos imediatamente sob pena de responsabilização por uso
indevido.
The contents of this message (and of its eventual enclosures) are intended
to the exclusive benefit of the addressee indicated above and may contain
confidential and/or proprietary information and may not be copied or
disseminated without express consent of Medidata Informatica S/A. In case
of unduly reception thereof by any other party than the addressee above,
this message and its enclosures shall be immediately destroyed. The use or
disclosure of the contents of this message and/or its enclosures will
become such other party liable for such action.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================