At 09:33 16.07.2004, you wrote:
> >I made a VPN Connection with SecureClient behind a NAT device.
> >The Client uses UDP Encapsulation and all is working.
> >
> >Why cant i see the UDP packets in the log?
>
> what log do you mean? firewall or NAT-device? you should be
> able to see the
> logs on both points.
>
> >If i sniff on the external interface and ping from remote
> client to an
> >internal client the packets from remote are encapsulated and
> the reverse
> >packets clear. Whats up?
> >
> >09:38:41.160346 checkpoint.1297 > natrouter.2746: udp 92
> >09:38:42.160568 192.168.0.40 > 192.168.1.10: icmp: echo request
> >09:38:41.160346 checkpoint.1297 > natrouter.2746: udp 92
> >09:38:42.160568 192.168.0.40 > 192.168.1.10: icmp: echo request
>
> maybe icmp is allowed without encryption? check your rulebase ...
The rule is:
[EMAIL PROTECTED] - Intranet - Any - ClientEncrypt
no rule above that alloweds icmp in clear?
cheers
reinhard
--
Reinhard Stich ASSIST [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
