Rob,

You are correct, my mistake...

not enough coffee yet.

-----Original Message-----
From: Rob Cryan [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 25, 2000 09:41
To: 'Pellowski, Tom'
Subject: RE: [FW1] routing problem?


Tom,

When using a 32 bit mask it indicates a singular address.  That is, a single
IP will route to the gateway or host specified.




Rob Cryan
Solutions Integration Manager
infinitespace.com
Two Westborough Business Park
Westborough, MA 01581
Office: 508.870.4714


        -----Original Message-----
        From:   Pellowski, Tom [SMTP:[EMAIL PROTECTED]]
        Sent:   Tuesday, July 25, 2000 9:11 AM
        To:     'MIS'; [EMAIL PROTECTED]
        Subject:        RE: [FW1] routing problem?


        Uh,

        Using 255.255.255.255 for your mask will negate all...I am surprised
it took
        it. That is the broadcast address.


        -----Original Message-----
        From: MIS [mailto:[EMAIL PROTECTED]]
        Sent: Monday, July 24, 2000 4:14 PM
        To: Victor Barrientos
        Subject: RE: [FW1] routing problem?


        I already tried that, just double check, still does not work
        also created a flat local.arp file on $FWDIR/state with the
following:

        [valid_ip_webserver]        [AB-CD-EF-GH-CA-AA]
        and also with
        [valid_ip_webserver]        [AB:CD:EF:GH:CA:AA]

        I did use mask 255.255.255.255 on the route add -p command.
        also remove all anti-spoof rule on the FW interface, still does not
work


        -----Original Message-----
        From: [EMAIL PROTECTED]
        [mailto:[EMAIL PROTECTED]]On Behalf Of
        Victor Barrientos
        Sent: Monday, July 24, 2000 3:45 PM
        To: mis; [EMAIL PROTECTED]
        Subject: Re: [FW1] routing problem?



        try this

        on NT FW:

         - route -p add [valid_ip_webserver] 10.0.2.2
         - create a flat local.arp file on $FWDIR/state with the following:
                 [valid_ip_webserver]        [MAC_FW_External_Interface]

        Feel free to contact me.

        Victor Barrientos


        ----- Original Message -----
        From: mis <[EMAIL PROTECTED]>
        To: <[EMAIL PROTECTED]>
        Sent: Monday, July 24, 2000 6:08 PM
        Subject: FW: [FW1] routing problem?


        >
        >
        >
        > -----Original Message-----
        > From: mis [mailto:[EMAIL PROTECTED]]
        > Sent: Monday, July 24, 2000 2:58 PM
        > To: Pellowski, Tom
        > Subject: RE: [FW1] routing problem?
        >
        >
        > I am using winnt 4.0, it does not have 'route add host' command
        > Here are all the thing that I did
        >
        > on the gateway
        >    Route add -p [valid_IP_webserver]  mask 255.255.255.0 [ip of
gateway
        that
        > connect to webserver]
        >    Arp _s [valid_IP_webserver] [FW_s external MAC]
        >
        > On router
        >    route add [valid_IP_webserver]/32 [FW's external IP]
        >
        > on FW1
        >    acception everything in and out of web_server
        >
        > is there anything that I miss?
        > again I can access everything from the web_server
        > but nothing can connect to it using valid_IP_webser
        >
        >
        > -----Original Message-----
        > From: [EMAIL PROTECTED]
        > [mailto:[EMAIL PROTECTED]]On Behalf
Of
        > Pellowski, Tom
        > Sent: Monday, July 24, 2000 2:02 PM
        > To: 'mis'; [EMAIL PROTECTED]
        > Subject: RE: [FW1] routing problem?
        >
        >
        >
        >
        > You need to place a static route for that valid-IP pointing to the
        > webserver(10.0.2.2) so it knows how to get out and in
        >
        > route add host valid-IP 10.0.2.2
        >
        > HTH...
        >
        > Tom
        >
        > -----Original Message-----
        > From: mis [mailto:[EMAIL PROTECTED]]
        > Sent: Monday, July 24, 2000 15:11
        > To: [EMAIL PROTECTED]
        > Subject: [FW1] routing problem?
        >
        >
        >
        > Can anybody tell what I am missing here?
        >
        > localnet ----- gateway ------- router ------ internet
        > (10.0.1.*)        |
        >       |
        >                 webserver (10.0.2.2)
        >
        > i used static nat my webserver (10.0.2.2) to a valid IP (x.x.x.1)
        > I can brower the Internet on the webserver using its translated
valid IP
        >
        > but i cannot connect to the webserver using its valid IP from the
        localnet,
        > or from the Internet, why?
        >
        >
        >
        >
        >
        >
        
============================================================================
        > ====
        >      To unsubscribe from this mailing list, please see the
instructions at
        >                http://www.checkpoint.com/services/mailing.html
        >
        
============================================================================
        > ====
        >
        >
        >
        
============================================================================
        > ====
        >      To unsubscribe from this mailing list, please see the
instructions at
        >                http://www.checkpoint.com/services/mailing.html
        >
        
============================================================================
        > ====
        >
        >
        >
        >
        
============================================================================
        > ====
        >      To unsubscribe from this mailing list, please see the
instructions at
        >                http://www.checkpoint.com/services/mailing.html
        >
        
============================================================================
        > ====
        >
        >
        >
        >
        
============================================================================
        ====
        >      To unsubscribe from this mailing list, please see the
instructions at
        >                http://www.checkpoint.com/services/mailing.html
        >
        
============================================================================
        ====



        
============================================================================
        ====
             To unsubscribe from this mailing list, please see the
instructions at
                       http://www.checkpoint.com/services/mailing.html
        
============================================================================
        ====



        
============================================================================
        ====
             To unsubscribe from this mailing list, please see the
instructions at
                       http://www.checkpoint.com/services/mailing.html
        
============================================================================
        ====


        
============================================================================
====
             To unsubscribe from this mailing list, please see the
instructions at
                       http://www.checkpoint.com/services/mailing.html
        
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to