That's fine, if you have it routed. It works fine that way too. You will still need to add a route on the FW from your external valid IP to the internal IP.
-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Joao Santos Sent: Friday, September 03, 2004 1:24 PM To: [EMAIL PROTECTED] Subject: [FW-1] Re: [FW-1] R�f. : [FW-1] Nat Hi all, I actually never had to do the external arp to valid address mapping. I keep things layer 3 only by having the a route for the valid IP pointing to the firewall, so there's no need for the router to do the ARP request. I guess this can be a good or a bad choice depending on your network config. Regards. On Fri, 3 Sep 2004 12:23:14 +0200, Bertrand KLOTZ <[EMAIL PROTECTED]> wrote: > Hi > You must > - add a route from valid address to internal address > - have an entry in your FWDIR\state\local.arp file with: > valid_address external_mac_address > - reboot your FW1 > > Bertrand > > "Lopez Zambrano, David" <[EMAIL PROTECTED]> le 03-09-2004 11:15:37 > > Veuillez r�pondre � Mailing list for discussion of Firewall-1 > <[EMAIL PROTECTED]> > > Pour : [EMAIL PROTECTED] > cc : (ccc : Bertrand KLOTZ/DE3I/GFI/fr) > > Objet : [FW-1] Nat > > Hi, > I'm trying to set a simple nat on my system (WNT + CP4.1 is a little > older, i know...). but it doesn't works, what i'm doing wrong? > > I define a physical machine (ip 192.168.201.243 internal ip let's call > srv1) and on nat settings: valid ip: 195.77.175.69 (let's call this > Web1), and add auto nat-rules... > I also allow access to this ip: From 'any' To 'Web1' Service 'http' > Accept, > Log: Account... > > If i try to get <http://195.77.175.69/> http://195.77.175.69/ from > the outside, there would be srv1 who answers this request or not? > (well actually i get no answer from the server) I've tried to get > directly to the internal ip and it works, but from outside trying to > access to <http://195.77/> http://195.77/.... it doesn't work... what > i am doing wrong? > > Thank you all > > David > > Atentamente, > > David L�pez > > Resp. Sistemas y Operaciones > > Anuntis S.L. > > ================================================= > To set vacation, Out-Of-Office, or away messages, send an email to > [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your subscription options, > email [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, send an email to > [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your subscription options, > email [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
