I've got a better way, run SSH from your windows box through the firewall to
the Unix box, and then tunnel the X session backwards.  Much more secure and
it gets around NAT problems.

-----Original Message-----
From: Pug Bainter [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 06, 2001 2:01 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: problem with exceed and nat


[EMAIL PROTECTED] ([EMAIL PROTECTED]) said something that sounded
like:
> I have a question concerning Exceed and NAT. I have a firewall with
> checkpoint fw-1 v4.0 running on it. Due to some IP address problems I have
> to use nat for the source and destination ip address from the client
(NT-PC
> with exceed) towards the server Unix machine.
> PC----FW----. . . ---Unix server. The nat works fine.

Assuming I read you right, we have a very similar setup here. It's a pain,
but that is to be expected with the complexity of some networks.

> Does anybody know how to solve this problem.

We run a perl script that will determine the internal NAT address and give
this to X programs. We then run commands as follows:

xterm -display `find_xclient`:0.0

I've included the brain dead script which has some pathnames in it that
will probably not be appropriate for your site.

> e.g. which button to press that the client is sending his
> valid address in the udp packet?

If someone finds a button, I would love it!

Ciao,

-- 
Pug Bainter                                        |        AMD, Inc.
System Engineer, MTS                               |      Mail Stop 625
 [EMAIL PROTECTED]      |  [EMAIL PROTECTED]           |  5900 E. Ben White Blvd
 Phone: (512) 602-0364    |  Fax: (512) 602-6970   |     Austin, TX 78741
Note: The views may not reflect my employers, or even my own for that
matter.
*****************************************************************************
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter.         
*****************************************************************************
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to