maybe late, sorry, but
1) In NAT tab on workstation object set to static and 208.222.222.2
2) In ARP (presuming NT) %windir%\FW1\4.1\state\local.arp set IP address of
public address to MAC of FW public interface
3) Set rule in Policy Editor allowing traffic to/from NATted object
4) Set static route (presuming NT) route add -p 208.222.222.2 mask
255.255.255.255 192.168.10.1 (presuming .1 is firewall private)
Erik Goldoff
Systems Manager
The HoneyBaked Ham Company
678-966-3320
[EMAIL PROTECTED]
-----Original Message-----
From: Rodrick Brown [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 11, 2000 8:05 PM
To: [EMAIL PROTECTED]
Subject: [FW1] Nat Confusion
When setting up NAT on cpfw 4.1 say I define my machine web1 with an
internal ip of 192.168.10.2 and web1-external ip of 208.222.222.2
how does my system know to route 208.222.222.2 to 192.168.10.1 ??
this is what is confusing me I followed the directions on phoneboy.com
examples but im kind of lost here, for this kind of setup do I need to
aliases 208.222.222.2 to my Firewall machine ??
Sorry for the confusion.
Im trying to accomplish this:
www.foobar.com is my webserver its real ip on hme0 is 192.168.10.2
How can I setup checkpoint to say if some one request a service on
208.222.222.2 it routes the packet internally to 192.168.10.2
Im also having problems when I install my rule my firewall is unable to
communicate to the outside world what could be cuasing this i added the
following rule to my security policy but it doesnt seem to work as one
would think.
src | des | ser | action | track
firew any any accept long
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
