Seems like static NAT and redirect are being mixed here. If you want to use a redirect then use the http_mapped service (see solution id sk11532). If you do that, then you don't need to set up a static mapping for your web server. If you are doing static NAT on the IP address and don't want people to have to type in http://web_server:8000, then I think you'll have to use manual rules for the port mapping. Uncheck the automatic rules box in the object and create your static rules manually. Personally I'd go with the redirect approach since that way you don't need to burn an external (public) IP address.
-- Jon Allingham Director, IVT Leapstone Systems -----Original Message----- From: Nguyen Thanh Bien [mailto:[EMAIL PROTECTED] Sent: Friday, November 21, 2003 12:50 PM To: [EMAIL PROTECTED] Subject: [FW-1] How to NAT and redirect port ! Hi CP expert ! I got a problem when configuring CheckPoint FW-1 (NG-FP3 on Nokia IP350) to work with NAT and redirect port, my ascii art network diagram as follow : ------------- ------------- ------------- | Internet |----->| CP-FW-1 |------>| DMZ | ------------- ---+--------- -------+----- | | | | ---+-------- -------+---------- | LAN | | WEB, port 8000 | ------------ ------------------ I setup a NAT static for my web server (configure at node object properties dialog, so i got 2 automatic NAT rule setting) but then i can't change the service settings of original and destination nat rules. So how can i nat my web server to public IP address at port 80 (normal http port, not 8000). this's important to me because i can not change port 8000 on the web server (my web server application runs as normal user, can not change to root account due to security reason) please help me and forget about my bad english Nguyen Thanh Bien ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
