I hope I'm understanding your need correctly - read on...

Here's the trick (thanks to another list member who, many moons ago, helped me
see the light):  Define the range by creating a new service (TCP or UDP), then
in the port number field, put the range, separated by a dash.  For example:

http would say 80
myservice could say 1500-1510

Since it appears as a single service, you can add it to inspection and NAT
rules.  Good luck!

Dan Hitchcock
Network Engineer





[EMAIL PROTECTED] on 06/16/2000 01:04:45 PM

To:   [EMAIL PROTECTED]
cc:    (bcc: Dan Hitchcock/CSB)

Subject:  [FW1] Port ranges in groups?





All:

I've got about 30 or so ports, some of which are in a nice order, to put
into a rule.  I created a few port ranges and included the ports that
I needed, and was hoping to put all of the ranges and individual ports
within a group, but FW1, v4.1 sp1 seems not to allow me to put ranges
into a group.  Anyone else try this?  Any suggestions?

Thanks,

***********************************************************************
Mark E. Vendl
Systems Engineer
Systems Operations
Britannica.com
[EMAIL PROTECTED]
work: 312-347-7306
cell:   312-296-5965
***********************************************************************



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================






================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to