[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Traffic between subnets - problem
[email protected] wrote:
Yes, the address translation rules look ok. For a 1 to 1 NAT, use Static
and ensure the firewall module is arping for the address you choose for your
Static NAT.
For our static NAT's, we'll have an object for the internal and an object
for the external, say ...
www.site.org 10.10.10.10
www.site.org-public 1.1.1.1
Ok.. hrm.. so I should hide it behind an address range or make a host
called "int-ext" (heh) and give that an external NAT IP address?
ie:
dmz -> "Known" -> Any = Original = Original = Original -> FW1box
dmz -> Any -> Any = int-ext = Original = Original -> FW1box
I guess I'll give that a shot now that everyone has left the building,
and hope it works. :)
Thanks,
Jonathan
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
