Carol Raynes wrote:
>
> I have a problem routing to a specific network from the firewall. I am trying to
>route to 172.16.x.x via the internal interface of the firewall. Routing table looks
>OK, I have similar routes that work OK. This route however just times out.
>
> I have changed security policy to allow anything through the firewall but the route
>still fails, I then tried stopping the firewall service in control panel I was then
>able to route successfully.
>
> Does anyone have any ideas, any thoughts would be much appreciated.
>
>
Carol,
I also ran into something like this. Does the return path from the network
that
you are routing to take a different path (ie. does the return packet
come in the interface that the request went out on)? FW-1 does not like
this.
I had to tell the firewall that a.b.c.d addresses were allowed on the
interface
that the packet came back on in the spoof track definitions for the FW
object.
Hope that this helps.
Jeff
--
Sys Admin. It's a dirty job, but someone said I had to do it!
------------------------------------------------------------------------
Jeffrey L. Oliver Tel: (403) 329-5162
Network Analyst Cell: (403) 315-4461
The University of Lethbridge
4401 University Drive email: [EMAIL PROTECTED]
Lethbridge, Alberta www: http://home.uleth.ca/~jeff.oliver
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================