I found it
Thank you Martin.
:-)
Details on this subject:
Re: [FW-1] static NAT objetcs audit on the mailing list
Not Check Point official, but try Object Dumper - included with Object Filler
(http://www.lindercentral.com/ofiller for the latest stable and
http://gama.fime.uanl.mx/~mhoz/ofiller/ofiller_2.2B1.tar.gz for the latest beta
- in the short term)
You will need to get a copy of your objects_5_0.C file from your SmartCenter
(located at $FWDIR/conf) and then run Object Dumper this way: odumper -f
objects_5_0.C -o result.csv
Then you'll get a CSV file that shows you *all* the objects you have declared
so far. You may open it with Excel or any other spreadsheet program able to
understand the CSV format (I think all of them do :-P) - This will tell you
which ones have NAT enabled, the NAT type and the NATting IP address. If you
get any doubts, there are docs included with the tools or you may drop a direct
e-mail to me...
Hope it may be useful!
Sébastien BARRAU
Ingénieur Systèmes et Sécurité
MCSE Windows 2000
Société Inter-Informatique
022 817 07 07
079 412 00 61
-----Message d'origine-----
De : Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] De la
part de Sébastien BARRAU
Envoyé : mercredi, 25. janvier 2006 10:27
À : [email protected]
Objet : Re: [FW-1] Adding static NAT rules with dbedit
Hello,
I can't help you a lot.
But I saw a tool to implement important entries (this is not dbedit).
I know it's light.
But it's a way: looking on another tool.
Sorry :-(
Sébastien
-----Message d'origine-----
De : Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] De la
part de Chris Reining
Envoyé : vendredi, 2. décembre 2005 16:22
À : [email protected]
Objet : [FW-1] Adding static NAT rules with dbedit
Hello,
I need to add a large volume of NAT rules to a policy. I would like to
do this via dbedit. I was easily able to add 500 or so new TCP
services with dbedit using the -f [file] flag by loosely following the
suggestions in the phoneboy.com wiki [0]. Does someone have
information on how to add static NAT entries with dbedit? In
particular I need to add entries on the Address Translation tab like
so:
original packet | translated packet
source - destination - service | source - destination - service
groupA - hostA - serviceA | original - hostB - serviceB
The groups, hosts and services all exist in the db.
Thanks
Chris
[0] http://www.phoneboy.com/bin/view.pl/FAQs/HowToCreateObjectsViaCommandLine
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
