Hmmmmmm Forget it!, because I forgot a main rule: routing happens "before" nat... solution: route add 192.168.37.14 192.168.101.201
thanks Alberto L�pez de Ochoa Llovet wrote: > Hi! > I can not get an source and destination nat working...This is what i > see in snoop: > > 192.168.0.31 -> 192.168.37.14 TCP D=30001 S=32851 (original packet) > 192.168.101.200 -> <<public ip>> TCP D=30001 S=32851 (nated packet) > > So NAT rule and policy is ok. But the second paket doesn't has the > correct destination mac. It is fw mac, not external router mac, which > has ip 192.168.101.201. With an arp -a I see the fw knows router mac. > So I think the problem is in the routing table. But I added a route to > the public address through the router ip, 192.168.101.201, and still > doesn't work. > I've seen a similar problem in phoneboy, but it's destination is on fw > network, which is not my case. > > Anyone knows what I'm doing wrong? > TIA > ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
