On Wed, Dec 26, 2001 at 05:08:26AM -0900, Don Leeper wrote:
> I am having an issue. I have installed a W2K Box with FW1 4.1. First I
> hardened the box and changed the registry to 1 for the routing (tcp/ip).
> Installed checkpoint and added a local.arp to the conf folder. Next I added
> routes so people could hit the web servers. Here is the problem, there is
> a routing issue or something I am missing. From the LAN, I can hit the web
> servers on the dmz. I can also hit an external IP we have on our same
> subnet x.y.z.71. The FW is x.y.z.66 and the router from the isp is
> x.y.z.65. What I can't seem to do is hit anything from outside of that. I
> can't go to yahoo.com, can't ping anything outside. Seems like the FW is
> sending it out but not getting nothing back. Does anyone know off hand what
> I may have forgotten? I really need some help on this one. In a real rush.
> Thanks in advance... If I did something wrong please let me know...
Make a rule that permits everything and logs long.
Then you'll see exactly what you are (and are not) getting.
Also, put a PC in place of the firewall and eliminate any
upstream gotchas like routing. If the PC accesses everything
OK then ISP and routers are eliminated.
Run a sniffer (www.ethereal.com)
alan
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================