Thanks for the replies.

I should have been more specific.  I do have a rule to allow X back but the
problem is I can't even ping my client?

Thanks,

Huiqi


                                                                           
             Ronny Nussbaum                                                
             <[EMAIL PROTECTED]                                             
             AIL.COM>                                                   To 
             Sent by: Mailing          [EMAIL PROTECTED] 
             list for                  INT.COM                             
             discussion of                                              cc 
             Firewall-1                                                    
             <FW-1-MAILINGLIST                                     Subject 
             @AMADEUS.US.CHECK         Re: [FW-1] Secure Remote problem    
             POINT.COM>                                                    
                                                                           
                                                                           
             03/03/2006 20:43                                              
                                                                           
                                                                           
             Please respond to                                             
             Mailing list for                                              
               discussion of                                               
                Firewall-1                                                 
             <FW-1-MAILINGLIST                                             
             @AMADEUS.US.CHECK                                             
                POINT.COM>                                                 
                                                                           
                                                                           




Or you can make "X11" part of the "Any" group:

-Policy menu
-Global Properties
-SmartDashboard Customization
-Stateful Inspection
-Check "reject_x11_in_any"

-RoNNY

On 3/3/06, Reinhard Stich <[EMAIL PROTECTED]> wrote:
> hi,
>
> X11 ist not part of the "any"-service - so please make a rule where
> you allow X11.
>
> cheers
> reinhard
>
> At 17:32 03.03.2006, you wrote:
> >I'm not sure if I've misunderstood something (not the first time), or
what
> >else.  Here is my problem:
> >
> >Configuration: one central gateway, and one Nokia enforcement module.
Both
> >managed by the same smartcentre.  Both on NG R55, running Traditional
Mode
> >VPN.  There is a site-to-site VPN between the two.  Office Mode
configured
> >on central gateway.
> >
> >Problem: Connecting to the internal systems behind the Nokia - no
problem.
> >But I can't display back X, or even ping the client.
> >
> >I can connect to the central gateway and display back/ping the client
> >without any problems.
> >
> >I noticed that when I connect to a system behind the central gateway
> >(telnet), I can see the IP address of the client is the office mode
> >address.
> >
> >However, connecting to a system behind the Nokia, the IP address is not
the
> >office mode address but the one assigned by the ISP router.
> >
> >The firewall rules appear to be OK, but the problem is the point above
(the
> >office mode address isn't shown up).
> >
> >Any hints?
> >
> >Many thanks.
> >
> >Huiqi Liu
> >
> >=================================================
> >To set vacation, Out-Of-Office, or away messages,
> >send an email to [EMAIL PROTECTED]
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >=================================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >=================================================
> >If you have any questions on how to change your
> >subscription options, email
> >[EMAIL PROTECTED]
> >=================================================
>
> --
> Reinhard Stich  ASSIST  [EMAIL PROTECTED]
> Internet Security AG,      1150 Wien, Johnstrasse 29
> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to