[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] SecureRemote ? (routes ?)
I don't believe the route table comes directly into play whatsoever. The topology for your network (all the networks that exist behind your firewall) gets communicated to the client and in stored in files (look at the userc.c file) at the client. Any communications from the client destined towards any host that exists on the networks described in userc.c then gets encrypted. The destination of that encrypted packet then is the gateway (firewall) that the client selected. In non-mep situations there is only one gateway. In mep the client has to decide which gateway to use. Once the gateway is decided the packet is sent along its way. Only at this point is the routing table of the client used, to determine how best to reach the gateway (normally the default route, the gateway of your ISP will be used). ---------------------------------------------------------------------------------------- Greg Winkler Systems Manager, IT&S Huntsman Corporation Internet Mail: [email protected] Voice:Fax:brian dell <[email protected]> Sent by: Mailing list for To: [email protected] discussion of Firewall-1 cc: <[email protected] Subject: [FW-1] SecureRemote ? (routes ?) POINT.COM> 08/30/2003 07:32 AM Please respond to Mailing list for discussion of Firewall-1 question about a client running SR finds routes to networks behind the firewall. ie to access networks behind (or protected) by the firewall, how does client box (running SR) route to them ? is the route table on the client box modified ? (question is not about how encryption for the connection takes place but rather how does the SR client box find that the routes for networks that are behind the firewall ?) __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|