Hi. The firewall has an interface on the same network as the internal ip address for the server, so it will do ARP.
On Fri, 3 Sep 2004 13:41:03 -0400, Robert Plaenk <[EMAIL PROTECTED]> wrote: > That's fine, if you have it routed. It works fine that way too. You will still need > to add a route on the FW from your external valid IP to the internal IP. > > > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf > Of Joao Santos > Sent: Friday, September 03, 2004 1:24 PM > To: [EMAIL PROTECTED] > Subject: [FW-1] Re: [FW-1] R�f. : [FW-1] Nat > > Hi all, > > I actually never had to do the external arp to valid address mapping. I keep > things layer 3 only by having the a route for the valid IP pointing to the firewall, > so there's no need for the router to do the ARP request. I guess this can be a good > or a bad choice depending on your network config. > > Regards. > > On Fri, 3 Sep 2004 12:23:14 +0200, Bertrand KLOTZ <[EMAIL PROTECTED]> wrote: > > Hi > > You must > > - add a route from valid address to internal address > > - have an entry in your FWDIR\state\local.arp file with: > > valid_address external_mac_address > > - reboot your FW1 > > > > Bertrand > > > > "Lopez Zambrano, David" <[EMAIL PROTECTED]> le 03-09-2004 11:15:37 > > > > Veuillez r�pondre � Mailing list for discussion of Firewall-1 > > <[EMAIL PROTECTED]> > > > > Pour : [EMAIL PROTECTED] > > cc : (ccc : Bertrand KLOTZ/DE3I/GFI/fr) > > > > Objet : [FW-1] Nat > > > > Hi, > > I'm trying to set a simple nat on my system (WNT + CP4.1 is a little > > older, i know...). but it doesn't works, what i'm doing wrong? > > > > I define a physical machine (ip 192.168.201.243 internal ip let's call > > srv1) and on nat settings: valid ip: 195.77.175.69 (let's call this > > Web1), and add auto nat-rules... > > I also allow access to this ip: From 'any' To 'Web1' Service 'http' > > Accept, > > Log: Account... > > > > If i try to get <http://195.77.175.69/> http://195.77.175.69/ from > > the outside, there would be srv1 who answers this request or not? > > (well actually i get no answer from the server) I've tried to get > > directly to the internal ip and it works, but from outside trying to > > access to <http://195.77/> http://195.77/.... it doesn't work... what > > i am doing wrong? > > > > Thank you all > > > > David > > > > Atentamente, > > > > David L�pez > > > > Resp. Sistemas y Operaciones > > > > Anuntis S.L. > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, send an email to > > [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your subscription options, > > email [EMAIL PROTECTED] > > ================================================= > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, send an email to > > [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your subscription options, > > email [EMAIL PROTECTED] > > ================================================= > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your subscription options, email [EMAIL > PROTECTED] ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
