The idea is to allow the firewall to forward packets from one interface
to another.
If the firewall goes down in the middle of the night, so what. According
to your logic,
let packets flow from one interface to another without the aid of a
firewall. Hate to have
those hackers denied access to the internal networks along with legitmate
users.
merlin
Firebird wrote:
Great idea, so when the FireWall blows up, the whole net connecton
blows up... And not just the ptrotection.. how smart :) I must admit that
this shouldn't happen, but if it does, during the night, then your network
won't be accessable like it would be otherwise.I would recommend leaving it configured and configure correctly the
FireWall. It can't do any harm to leave the kernel handle this.So long,
Firebird---Reply to mail from Barry W. Kokotailo about [FW1] Ip forwarding On Firewall
> Leave ip routing off on the Solaris machine. The firewall will handle it.
>
> merlin
>
>
> "benjamin.c" wrote:
>
>> Do you need to enable IP forwarding on solaris
>> or leave it off, and will firewall -1 handle this.
>>
>> System Administrator
>> http://www.Apocolips.org.uk
>>
>> ( ) ( ) ( ) ( ) ( )
>>
>>
> ===============================================================================
>
>> To unsubscribe from this mailing list, please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>>
> ===============================================================================
>
>
> --
> Barry W. Kokotailo
> Senior Unix Systems Administrator
> 1-780-675-6399
> PGP = 71 71 96 A3 C0 C2 23 7A 23 4E D4 04 8C E0 42 6B B0 2D D1 A5
>
>
>---End reply
/------------------------BEGIN GEEK CODE BLOCK-----------------------\
| GCS/CM d+ s+: a? C++++ UL++++ P+ L++++ E-- W+++ N-- o K- w--- O- |
| M-- V-- PS PE+ Y PGP t+++ 5 X R+ tv b- DI- D+ G++ e- h r% y++++ |
\,------------------------END GEEK CODE BLOCK-----------------------,/------- __.oOo.__ The Firelord ------------------- [EMAIL PROTECTED]
------ /^( _ )^\ aka Firebird -------------- [EMAIL PROTECTED]
----- / . \/^\/ . \ UIN# 2709968 ------------ [EMAIL PROTECTED]
---- / _)_ - _(_ \ http://www.firebird.cx
--- /.-. ).( .-.\ ------------------------------------------
-- /. /\_/\ .\ ------ The man who lives with linux ----
- "-V-" --------- lives with the future ------================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
-- Barry W. Kokotailo Senior Unix Systems Administrator 1-780-675-6399 PGP = 71 71 96 A3 C0 C2 23 7A 23 4E D4 04 8C E0 42 6B B0 2D D1 A5
