Redirect it how? Sounds a little like domain load balancing. Balance from
outside the firewall if so. Explain why and we can probably offer more
assistance.
-----Original Message-----
From: D330 SCHsu [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 17, 2000 10:10 PM
To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
Subject: RE: [FW1] NAT doesn't work for HTTP and FTP
So, how do I make the NAT rule effect before the outbound HTTP rule? I have
no idea with this.
Beside, in page 207 of the AA book (version 4.0), address translation takes
place after the security rule.
It's very important to me since I want to redirect the HTTP traffic to
another line in the router.
The router can redirect traffic depending on source address.
Marcus
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 17, 2000 9:46 PM
To: D330 SCHsu
Subject: RE: [FW1] NAT doesn't work for HTTP and FTP
This is simply because your outbound WEB rule is occuring before your static
rule for the server.
As long as your other services are working OK, I wouldn't worry about it.
Thomas
-----Original Message-----
From: D330 SCHsu [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 17, 2000 3:48 AM
To: '[EMAIL PROTECTED]'
Subject: [FW1] NAT doesn't work for HTTP and FTP
Hi.
I have set a NAT for one internal workstation and the NAT rule is
automatically generated, but I found the source address is translated to the
firewall's external address when it initilals HTTP or FTP request, but not
the NAT I specified. Hwoever, the NAT is effective for other services.
Example:
the workstation internal IP address is 10.2.1.1, the NAT I set is 202.2.1.1
the firewall external IP address is 202.2.1.250
If I try to use HTTP or FTP on 10.2.1.1, its address is translated to 202.2.
1.250
If I try to use telnet, pop3, nntp..., it's translated to 202.2.1.1.
Anyone can help me?
---------------------------------------------------
o Marcus Hsu, Shyh-Chieh (ext. 7639) O o
o D330 Systsem Engineer, IT Div. <\-/> o
o Winbond Electronics Corp. _/ \_ o
o My Homepage: http://Marcus.Hsu.net/ o
o http://Marcus.idv.tw/ o
---------------------------------------------------
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
