In Checkpoint, ranges are only used in NAT rules.  You therefore, will need
to create 20 workstation objects and place them in a group.  Then use that
group in your rule.



Rick McMaster
ePlus Technology
http://www.eplus.com


-----Original Message-----
From: Langa Kentane [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 09, 2001 5:33 AM
To: Firewall-1 Mailing List (E-mail)
Subject: [FW1] IPRanges in policy



Greetings.
I want to add an IP range to a rule to allow everything on that range to ftp
to anywhere.
The problem is that when I try to select the IP range on the source field, I
cannot find it there but the object has been created and when I go manage
network objects, I can actually see it.

How would I get around this, I dont want to have to create a host for each
address on the range and creating a network object sounds risky to me
because only 20 hosts from the network are to connect.

The network is 192.168.2.0, the host are 1 - 20 and the netmask is
255.255.255.0, please help.

Thanks in advance
Ciao

__________________________________________________________
Langa Kentane           | TEL: (011) 290 3218
Security Administrator  | Cell: 082 606 1515
DISCOVERY HEALTH                | http://www.discoveryhealth.co.za
__________________________________________________________________



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to