Hi,
running CP under Microsoft needs the file $FWDIR\state\local.arp for the
ARP-Proxy.
Which entries did you write in this file? The correct format is

IP-Address    MAC-Address of externa Interface of FW
e.g.
204.32.38.101 00-00-00-00-00-00

If you do so and restart the Firewall, it should work.
In addition to that, at the FW you will need a route for the translated address
if you configure STATIC NAT. E.g.
  route add 204.32.38.101 mask 255.255.255.255 10.1.1.1 metric 1 -p

So if you have these two points it should work.
One more reason for a possible failure is the Anti-Spoofing at the internal
Interface. The packets are translated here, so you may have the problems of
external IP's at this interface.

Hope it helps,
best regards
Matthias


[EMAIL PROTECTED] wrote:

> Hi All,
>         We have configured local.arp file instead of routes for some
> specific reasons in checkpoint firewall on windows NT platform. It is not
> working properly. Is there any other configuration we need to do to make it
> work properly. Apart from creating this file and adding some entries, do we
> need to do anything more. Can anyone suggest the exact procedure to do this.
>
> Thanks & regds.,
> Babu
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
begin:vcard 
n:Leu;Dr. Matthias 
tel;cell:+49 172 8943533
tel;fax:+49 8102 895 199
tel;work:+49 8102 895 190
x-mozilla-html:FALSE
org:AERAsec Network Services and Security GmbH
adr:;;Wagenberger Strasse 1;D-85662;Hohenbrunn;;
version:2.1
email;internet:[EMAIL PROTECTED]
fn:Dr. Matthias Leu
end:vcard

Reply via email to