Thanks for your answer that was very useful, I didn't have the info about
$FWDIR/modules/fwkern.conf
however when I reboot with this file, the FX doesn't start

Bertrand





Tomas Lundner <[EMAIL PROTECTED]>@AMADEUS.US.CHECKPOINT.COM> le
09-02-2005 13:34:45

Veuillez r�pondre � Mailing list for discussion of Firewall-1
       <[email protected]>

Envoy� par :      Mailing list for discussion of Firewall-1
       <[email protected]>


Pour : [email protected]
cc :

Objet :     Re: [FW-1] PPTP with hide NAT


We got this solution from CP.

----------------------------------

RE: Problem with the fix for PPTP behind nat

Here is the answers to the queries raised regarding steps 21 and 26 in
the release notes:

1. In case you do not manage to use the dbedit tool, you can perform the
following on the SmartCenter Server:
- cpstop
- Go to %FWDIR%/conf and backup the objects_5_0.C.
- Open the objects_5_0.C for editing and add the section mentioned in
step 21.
- cpstart
(these instructions should replace step 21)

2. Step 26 can be performed in the following manner:
The global parameter "fw_pptp_enforce_protocol" has to be set to 1 on
the module.
In order to set the global parameter please do the following on the
gateway:
- create a file fwkern.conf in $FWDIR/modules/fwkern.conf
- add the following line: fw_pptp_enforce_protocol=1
- reboot the machine

-----------------------------------

//Tomas

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of
Bertrand KLOTZ
Sent: den 9 februari 2005 12:39
To: [email protected]
Subject: [FW-1] PPTP with hide NAT

Hi all

does anybody try the the patch that came with HFA10 to acces external
pptp server from hide NAT behind FW1 If yes did you succeed to make it
work and how ? for me it's not OK on splat and HFA12

Thanks by advance for answers

Bertrand

=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
[EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options,
email [EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to