You'd better install all 3 NICs from the start before doing firewall
installation.
You have to add routing entry at the router to network address of DMZ
through firewall.
Pranadjaja
> -----Original Message-----
> From: Rusdyanto Tardjono [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, August 14, 2000 4:55 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: RE: [FW1] DMZ can't access to internet
>
>
> Dear Carlos,
> I will try to add in IP Route in the router.
> Just FYI, I've got 3 NICs and currently only use 2 NICs on the FW machine
> (one for connection coming from router and another for connection to DMZ
> hub). Those 2 NICs are on the same subnet mask. Can it work that way?
> Thanks alot for your advice. Really appreciate it.
>
> Rusdy
>
> -----Original Message-----
> From: Carlos Infante [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 14, 2000 4:35 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [FW1] DMZ can't access to internet
>
>
> Does the router know to come back to the server at the DMZ? Are you using
> NAT? you should have a route in the router
> to go to the DMZ through FW-1 and of course a route in the server to reach
> internet through the FW-1 (perhaps for testing purposes a default router
> through the FW-1)
>
> -----Original Message-----
> From: Rusdyanto Tardjono [mailto:[EMAIL PROTECTED]]
> Sent: lunes, 14 de agosto de 2000 11:13
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: RE: [FW1] DMZ can't access to internet
>
>
> Dear Carlos,
> Sorry that I forget to tell you that I'm using NT 4.0.
> I have enabled the IP forwarding and the route from route print command in
> NT seems fine.
>
> Rusdy
>
> -----Original Message-----
> From: Carlos Infante [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 14, 2000 4:10 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [FW1] DMZ can't access to internet
>
>
> Hi Rusdy,
> Is de ip_forwarding = 1 in the FW1? Sometimes you need to set up in a
> script
> in the boot process
> (# "ndd set ip-forwarding=1" or something like that).
> Has the FW1 the routes properly defined?
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> Rusdyanto Tardjono
> Sent: lunes, 14 de agosto de 2000 9:45
> To: [EMAIL PROTECTED]
> Subject: [FW1] DMZ can't access to internet
>
>
>
> Dear Guru,
>
> I am in the process of Checkpoint pre-installation. As the requirement
> says,
> I must make sure that the routing work before installing the software.
> My configuration:
>
> From router goes into one NIC of FW-1 (202.xxx.xxx.xxx) and another NIC
> from
> FW-1 goes into a hub which connects to DMZ Servers.
> I can ping to internet from FW-1 machine but from a server in DMZ area can
> only ping to the FW-1, not even ping to the router and internet.
> Can someone please help me? Your advice is very much appreciated.
> Thank you.
>
> Regards,
> Rusdy
>
>
>
>
> ==========================================================================
> ==
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ==
> ====
>
>
>
> ==========================================================================
> ======
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
