you have to use Hide NAT option in the internal network object but what you can do is enter following rules in your Address Translation Tab: src dst srv internal-network DMZ any original original DMZ internal-network any original original(if you want dmz to access internal network)
-----Original Message----- From: Ramesh Ragineni [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 16, 2002 11:52 AM To: [EMAIL PROTECTED] Subject: [FW-1] Fw-1 NAT Hello, I have checkpoint ver 4.1 running on soalris 2.7 E250 box, I have internal public class C network. I dont want to do NAT from internal to DMZ, but when it goes to internet i want to do NAT using fw-1 external interface ip address. How can i do it, with out using hide option on internal network object. Thanks Ramesh ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
