Let's say I've gotten quite intrigued at the types of queries that are being
blocked to a certain host. All I can tell from my firewall logs is that the
host on my end is numbered 12.x.x.138, but since I'm using dynamic NAT
translation for my network (and that address falls into the dynamic range),
there's no static relationship to an internal host.
Is there a way, at any given point in time, to check the NAT table on a PIX
and find out which internal host is being mapped to a specific external NAT
address? I am wondering whether this host is inviting the strange traffic,
but I'm not sure how to tell which of my internal hosts it is.
Thanks,
Dave Shackelford
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
