On Mon, 22 Feb 1999, Blanco, Juan wrote:

> Date: Mon, 22 Feb 1999 09:03:06 -0500
> From: Blanco, Juan <[EMAIL PROTECTED]>
> To: "FireWall-Email (E-mail)" <[EMAIL PROTECTED]>
> Subject: I need help here
> 
> Folks what should I do here, we are using Firewall-1 version 4.0. Below is a
> message that already two users got.
> Thanks in Advanced for your help.

Make sure that the external interface of your firewall as a reverse DNS 
entry.  If it doesn't, ask your provider to add one.  If it does, but 
your users are using valid IP addresses, you'll need to either ensure 
they have valid reverse entries for their individual hosts, or use a 
proxy at the firewall.  If you're using NAT, only the valid entry or 
entries on the outside need reverses.  

Lastly, depending on the validation scheme it could be that your IP 
addresses are allocated in the "multi-use" space (eg. pre-CIDR addresses 
fit in that space rather than in the US allocation space), in which case 
you'll need to contact the owners of the target server to find out if you can 
reach a compromise.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."
                                                                     PSB#9280

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to