You can manually add rules via the Address Translation tab of the GUI with any source and destination translation you want. Just create a rule that has the following and it should do the trick.
DMZ Source | Internal Network | Port || Internal NAT Address | Original | Original
---
Michael Martin
Internet Design Engineer
Internet Engineering
Nortel Networks
Phone: (408) 495-6474 ESN: 265-6474
Fax: (801) 365-7837
-----Original Message-----
From: David Kyger [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 18, 2001 5:57 PM
To: [EMAIL PROTECTED]
Subject: [FW1] nat external IPs
I'm not sure if this is possible, but it's a need I have and wanted to see
if anyone has tried this before. Say I have an internal address range of
1.2.x.x and a DMZ with an address range of 3.4.x.x. A certain number of
these internal machines have a static nat and are accessed by certain
machines in the DMZ. Problem is- I would like to "reverse nat" from the DMZ
into the internal address space. i.e. when a DMZ machine with ip address
3.4.5.6 accesses the internal net, I would like for it to appear as 1.2.5.6
on the internal segment. Any ideas on this?
cheers,
-dave
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
