I dont think that I am exactly sure of what you want to do but if you want to do "Port Address Translation" you will have to create an "Other" service. Call it mapped_smtp or something with ip protocol 6 for tcp I think. In the advanced section under "Match" type: SRV_REDIRECT(<external port>,<internal ip>,<internal port>) example: SRV_REDIRECT(25,172.16.1.1,25). Now use this object in your rule base as "any to firewall service=mapped_smtp accept" above any stealth rules. As far as I know this only works with your firewalls outside ip address. If you want it to work for other ip addresses you would have to modify the arp table in your upstream router but you might as well add static NAT.
Covington, Chris said: > No, I still need A to be NATed but I want SMTP to A redirected to B on > the private network. > > Chris > > -----Original Message----- > From: jim [mailto:[EMAIL PROTECTED] > Sent: Sunday, June 08, 2003 4:49 PM > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] Attempting PAT on SecurePlatform FP3 HF2 > > > So you just need to stop natting A, and nat B instead? > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf Of > Covington, Chris > Sent: 07 June 2003 18:33 > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] Attempting PAT on SecurePlatform FP3 HF2 > > > PS - mail server A is one-to-one NATed (so that the MX record can point > to it! And this is not the IP of the firewall), mail server B is not > (it only has a private IP). > > Chris > > -----Original Message----- > From: Covington, Chris > Sent: Saturday, June 07, 2003 1:20 PM > To: [EMAIL PROTECTED] > Subject: Attempting PAT on SecurePlatform FP3 HF2 -- Caleb Walker CCSE, MCSE ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
