NG AI, IPSO 3.7 Build 29, VRRP pair

I'm testing a manual NAT rule to not NAT from a specific inside host to a
specific outside host on the External interface of my VRRP pair.

When doing a ping and watching  tcpdump, the address still gets translated
to the VRRP address when it leaves the firewall.

If I modify the Manual NAT rule and specify the network on which the INSIDE
host resides and still leave the external host,  it works properly (no
translation).

Am I missing something here?.

[EMAIL PROTECTED]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to