comments below..

> -----Original Message-----
> From: Reinhard Stich [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, April 24, 2002 09:08
> To: [EMAIL PROTECTED]
> Subject: Re: [FW-1] NAT through VPN... Urgent
[snip]
> * this machine has to be part of your encryption-domain

And also the machine's NAT address.

> * you have to connect to the *internal* ip-address of the machine

not entirely correct. It's possible to use securemote to connect to a NAT'ed 
(non-internal) ip address as long as it (read: the NAT'ed ip address) is part of the 
encryption domain.

> * you have to use a service not allowed by any other rule
> above (if you try
> to ping and icmp is allowed in the implied rules it won't be
> encrypted ...)
>

Lars

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to