Try with REDIRECTs ports. e.g: If you want to use the 200.58.4.2 (public IP) to hide all internal host and you need that the 192.168.1.1 (internal IP) go ahead to internet and simulate a STATIC NAT for to recive attempt from the Internet e.g http (web_server), then...you must configure this 2 rules:
ONE: 192.168.1.1----->any----->http---->accept TWO: any----->200.58.4.2----->http_mapped---->accept Notice that: - The 200.58.4.2 can be the Firewall_object - You can create any redirect services all that you need is complete the "IP protocol" field with the "6" number. - The "Http_mapped" is a redirect service predefined, and the configuration is very simple, you must to complete the following fields in the advanced secction: SRV_REDIRECT(80,192.168.1.1,80) bye... Saludos, Mateo Cabrera - Soporte Tecnico Security Advisor www.sadvisor.com -----Mensaje original----- De: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] nombre de Sascha Picchiantano Enviado el: jueves, 16 de septiembre de 2004 11:28 Para: [EMAIL PROTECTED] Asunto: [FW-1] NAT question Hi there, if we have one public IP address and use that to Hide NAT our internal network, can we use that same IP address for a additional Static NAT rule? e. g. we have on public IP, need to hide our network behind it and still need to talk to a specific internal machine (and only on a specific port) from the Internet. We tried it by simply adding a static NAT rule to the already existing automatic Hide NAT rule, but it does not seem to work. The static NAT rule translates the public IP address and service XYZ to the internal IP address. NAT rules: 1. internal_Server -> StaticNAT on public IP 1.1.1.1, Service XYZ 2. internal_LAN -> HideNAT on public IP 1.1.1.1 On cheap firewalls you would call this Port Forwarding. It does not work here. Is it even possible? Thanks, Sascha ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
