Hi Giacomo,
the reason for the problem might be NAT. If you have configured it
manually, you will need to configure the ARP proxy too. If you do a
tcpdump at the external NIC, do you see the router asking "arp who has
<yournatip>" - without answer? Then, ARP resolution is missing.
Hope it helps,
best regards,
Matthias
P.S. from here, http://www.jmicron.com/ can be contacted.
Giacomo Fazio schrieb:
> Hello,
> i m not able to contact www.jmicron.com from my network.
>
> No SmartDefense protection is performing http protection.
>
> Outside firewall i can contact the web site!!!!
>
> Strange !!!
>
> Giacomo
>
>
> Number: 1543659
> Date: 19Nov2009
> Time: 8:24:10
> Product: VPN-1 Power/UTM
> Interface: eth1
> Origin: fw1ngx
> Type: Log
> Action: Accept
> Protocol: tcp
> Service: http (80)
> Source: 10.10.1.47
> Destination: 59-124-184-69.HINET-IP.hinet.net
> (59.124.184.69)
> Rule: 38
> Current Rule Number: 38-Standard
> Source Port: 1082
> Information: service_id: http
> NAT additional rule number: 0
> NAT rule number: 46
> Rule UID: {C7CF89A6-5365-400C-8933-E25D164B675A}
> SmartDefense Profile: No Protection
> XlateSPort: 28892
> XlateSrc: fw1.ifc.inaf.it (194.119.212.3)
> Policy Info: Policy Name: Standard
> Created at: Wed Nov 18
> 15:10:17 2009
> Installed from: fw1
>
--
AERAsec Network Services and Security GmbH HRB: 133265 München
Wagenberger Strasse 1 UStID: DE-209125001
D-85662 Hohenbrunn, Germany
Tel. +49 8102 895 190 Fax. +49 8102 895 199
Sitz der Ges.: D-85662 Hohenbrunn, Geschäftsführer: Dr. Matthias Leu
http://www.aerasec.de http://www.fw-1.eu
PGP Public Key: http://www.aerasec.de/wir/publickeys/MatthiasLeu.asc
Scanned by Check Point Total Security Gateway.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
