Did you setup your "arp" and "route" configurations on
your firewall?
If you're using AntiSpoofing, you need to include the
internal *and* external IPs (as objects) in the
Specific Group behind the firewall interface connected
to your DMZ.
HTH -- Chris
--- Ivan More <[EMAIL PROTECTED]> wrote:
>
> Hi,
>
> We are trying to setup a web server in the DMZ for
> public access. But we are not successful.
>
> Internet
> ********
> |
> |
> |
> |
> |
> -----------
> | |
> | | ----- DMZ
> | FW |-----------| | web server
> | | ----- internal IP 10.1.1.100
> | | external IP
> ------------
> |
> |
> ******
> Office
>
>
> In our rule base we have
>
> source destination service
> Any Web server http
> NAT to
> external IP
>
> We did not see any traffic connecting to this web
> server even when we try to connect to it (not using
> VPN). What did I missed out?
>
>
> Any help will be appreciated. Thanks.
>
>
> Cheers,
> Ivan
>
>
_______________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.ca address at
> http://mail.yahoo.ca
>
>
>
================================================================================
> To unsubscribe from this mailing list, please
> see the instructions at
>
> http://www.checkpoint.com/services/mailing.html
>
================================================================================
>
__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35
a year! http://personal.mail.yahoo.com/
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
