Uh,
Using 255.255.255.255 for your mask will negate all...I am surprised it took
it. That is the broadcast address.
-----Original Message-----
From: MIS [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 24, 2000 4:14 PM
To: Victor Barrientos
Subject: RE: [FW1] routing problem?
I already tried that, just double check, still does not work
also created a flat local.arp file on $FWDIR/state with the following:
[valid_ip_webserver] [AB-CD-EF-GH-CA-AA]
and also with
[valid_ip_webserver] [AB:CD:EF:GH:CA:AA]
I did use mask 255.255.255.255 on the route add -p command.
also remove all anti-spoof rule on the FW interface, still does not work
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
Victor Barrientos
Sent: Monday, July 24, 2000 3:45 PM
To: mis; [EMAIL PROTECTED]
Subject: Re: [FW1] routing problem?
try this
on NT FW:
- route -p add [valid_ip_webserver] 10.0.2.2
- create a flat local.arp file on $FWDIR/state with the following:
[valid_ip_webserver] [MAC_FW_External_Interface]
Feel free to contact me.
Victor Barrientos
----- Original Message -----
From: mis <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 24, 2000 6:08 PM
Subject: FW: [FW1] routing problem?
>
>
>
> -----Original Message-----
> From: mis [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 24, 2000 2:58 PM
> To: Pellowski, Tom
> Subject: RE: [FW1] routing problem?
>
>
> I am using winnt 4.0, it does not have 'route add host' command
> Here are all the thing that I did
>
> on the gateway
> Route add -p [valid_IP_webserver] mask 255.255.255.0 [ip of gateway
that
> connect to webserver]
> Arp s [valid_IP_webserver] [FWs external MAC]
>
> On router
> route add [valid_IP_webserver]/32 [FW's external IP]
>
> on FW1
> acception everything in and out of web_server
>
> is there anything that I miss?
> again I can access everything from the web_server
> but nothing can connect to it using valid_IP_webser
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> Pellowski, Tom
> Sent: Monday, July 24, 2000 2:02 PM
> To: 'mis'; [EMAIL PROTECTED]
> Subject: RE: [FW1] routing problem?
>
>
>
>
> You need to place a static route for that valid-IP pointing to the
> webserver(10.0.2.2) so it knows how to get out and in
>
> route add host valid-IP 10.0.2.2
>
> HTH...
>
> Tom
>
> -----Original Message-----
> From: mis [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 24, 2000 15:11
> To: [EMAIL PROTECTED]
> Subject: [FW1] routing problem?
>
>
>
> Can anybody tell what I am missing here?
>
> localnet ----- gateway ------- router ------ internet
> (10.0.1.*) |
> |
> webserver (10.0.2.2)
>
> i used static nat my webserver (10.0.2.2) to a valid IP (x.x.x.1)
> I can brower the Internet on the webserver using its translated valid IP
>
> but i cannot connect to the webserver using its valid IP from the
localnet,
> or from the Internet, why?
>
>
>
>
>
>
============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
>
>
============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
>
>
>
============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
