You can try to put a firewall to work without routing activated (i think it
doesnt work)

In Windows 2000 you have to activate IP forwarding (routing) and be carefull
with routing tables. I think this is true to all OS, but you can try it.

Ricardo Marques

-----Original Message-----
From: Olaf Lange [mailto:[EMAIL PROTECTED]
Sent: segunda-feira, 2 de Junho de 2003 16:52
To: [EMAIL PROTECTED]
Subject: [FW-1] Enable/Disable IP forwarding/routing


Dear all,

as I found there are some inconsistencies in public literature regarding
to Firewall-1 installations. Perhaps somebody can explain what's right :-)

In  "CCSA Next Generation Check Point Certified Security Administrator
Study Guide" (ISBN 0-07-219420-0 from McGraw-Hillx) he says "In Solaris,
IP forwarding is enabled by default and should be disabled." As well the
  processing of source routed packets should be disabled.

But in Sybex "CCSE NG Check Point Certified Security Expert Study Guide"
the authors writes "....be sure the machines properly route packets
between each network interface. Be sure that IP routing/forwarding is
anabled in your OS and the routing tables are correct."

What's the truth ? I am a little bit irretated :-(

Thx

Olaf

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to