On Mon, 17 Sep 2007, David DeSimone wrote:
[EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
When the phone tries to connect, the firewall (splat R55) immediately
drops the packet (the drop rule - which is the last rule). This means
that the rule I've set is not being processed or not being used at
all. Even if I set the rule to accept any any, it still immediately
goes to the drop rule. No other info are generated.
Checkpoint rules process incoming packets before they are translated by
NAT. Make sure you are allowing the untranslated IP addresses in your
security policy.
Sounds this use is better of using NAT on the object so Check Point will
handle both addresses.
But getting proprietary VoIP solutions to work through Check Point can be
a real pain.
Hugo.
--
[EMAIL PROTECTED] http://hugo.vanderkooij.org/
This message is using 100% recycled electrons.
Some men see computers as they are and say "Windows"
I use computers with Linux and say "Why Windows?"
(Thanks JFK, for this quote of George Bernard Shaw.)
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
