Are you using NT, Nokia, etc? You need to make sure that you have added
the ARP entries for the web servers public address in the firewall's ARP
table. You add the Web server's IP address with the MAC address of the
firewall's public interface so that the firewall will accept the traffic
bound to the web server. It will then process the packet, route it, and
send it on to the webserver.
Preston Jeffares
Network Engineer
Georgia Department of Revenue
-----Original Message-----
From: Ivan More [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 05, 2001 6:00 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [FW1] Web server in DMZ
Hi,
We are trying to setup a web server in the DMZ for
public access. But we are not successful.
Internet
********
|
|
|
|
|
-----------
| |
| | ----- DMZ
| FW |-----------| | web server
| | ----- internal IP 10.1.1.100
| | external IP
------------
|
|
******
Office
In our rule base we have
source destination service
Any Web server http
NAT to
external IP
We did not see any traffic connecting to this web
server even when we try to connect to it (not using
VPN). What did I missed out?
Any help will be appreciated. Thanks.
Cheers,
Ivan
_______________________________________________________
Do You Yahoo!?
Get your free @yahoo.ca address at http://mail.yahoo.ca
========================================================================
========
To unsubscribe from this mailing list, please see the instructions
at
http://www.checkpoint.com/services/mailing.html
========================================================================
========
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================