Check Point seems only capable of fairly simple routing rules, and doesn't appear to support transparent proxying. The trouble is that you can't create a NAT rule where the number of addresses in the original destination doesn't match the number of addresses in the translated destination (you get a 'Cannot compute the range size' or ' The range size of Original and Translated columns must be the same' error). There has to be a one to one relationship between original and translated addresses. Hence you can't map all connections to port 80 destined for any address to port 8080 on your proxy server. You will have to perform the redirect on the operating system level. Windows 2000, however, doesn't appear to support this (I did look very hard though). Linux, on the other hand, has supported this since about 1996, so if this is really important to you consider switching to Linux.
If Check Point ever get rid of this restriction, the NAT rule you want would be as follows: Orig Source: YourNetwork (except HttpProxyServer) Orig Dest: Any Orig Service: TCP http Trans Source: = Original Trans Dest: HttpProxyServer Trans Service: TCP 8080 At 16:11 28/02/2002 +0200, Haim Chibotero wrote: >Hi all >how can I make a rule so all my clients in the LAN will be redirected when >they use http to a proxy server, I don't want to change nothing on the >client side >like I want when they use http that it will redirect to 192.168.1.10:8080 >and from there the proxy will do the job > > >Thanks in advance > >btw I am using CP 4.1 + sp5 on w2k platform ! > >Haim Chibotero >IT Manager > MaxBill >T:+972 3 9114000 >F:+972 3 9114001 >C:+972 54 930384 ><http://www.maxbill.com/>www.maxbill.com > ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
