On Wed, 31 May 2000 11:47:12 -0500, Michael Lea wrote:

[snip]
>It may be useful to use your favorite network sniffing program
>to watch the traffic on both mail servers and your client machine as
>well.

That's what I did. I can see the packets on the DMZ instead of the 
external segment.

My theory is that FW-1 first looks for the route, then sends the 
packet to the appropriate interface, then translates the address. Of 
course, the addressee can't answer the packets...

Is there a way to have NAT done on the inbound interface? That would 
solve this problem.

Anyhow, thanks a lot to all who responded.

Ciao,

Joerg



// pallas  GmbH  ............  Joerg Oertel  ...........
   Hermuelheimer Str. 10       System engineer                   
   D-50321 Bruehl, Germany     [EMAIL PROTECTED]           
                               phone  +49-(0)2232-1896-0 
   http://www.pallas.de        fax   +49-(0)2232-1896-29
........................................................



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to