Re: [FW-1] NAT and Security

[Joe Bloggs]

Title: NAT and Security

Use the destination as webserver_int. You'll also need to configure it as a static NAT. Also if you're running it on NT, you'll to create a local.arp file enter the mac + ip of the external int of your fw, then add a static route to your server from ext addr to int addr.   :-)   ----- Original Message ----- From: Joao Coimbra To: [EMAIL PROTECTED] Sent: Friday, April 12, 2002 11:12 AM Subject: [FW-1] NAT and Security Dear All, I have one question about translation address and security. If I have the following situation: webserver_int - 192.168.10.10 webserver_ext - 200.200.201.12 (www.ez.com) I have created the NAT for those address, and I will have to configure the security. At the security tab must I configure wich way, A or B: A) source: any Destination: 200.200.201.12 (external) Service: http Action: Accept Or B) source: any Destination: 192.168.10.10 (internal) Service: http Action: Accept Is necessary to create a rule with the internal, external or both address? Thanks a lot!!! Best Regards for all. Jo�o Coimbra --> Gest�o T�cnica - MCSE / ASE --> [EMAIL PROTECTED] ------------------------------------------------------------------------------- Fone: +55 11 3365-0305 - Fax: +55 11 3365-0319 ------------------------------------------------------------------------------- EZTrade --> Transformamos seu business em e-business --> www.eztrade.com.br