location

fwdir\state\local.arp

Make this file using command line edit.com, only edit this file through
edit.com (do not use wordpad, file associations are bad!

format is the following:

<external ip> <mac address of fw nic facing the router>

I have successfully used both a space bar _ _  or a tab _       _ between
the two addresses

You must do a fwstop and a fwstart for everything to work.
Make sure NAT is in place, and also the rules for access. 

Don't forget the 1:1 routing entry, Let's say the external address is
200.200.200.200 and the internal DMZ address for a host is 10.1.1.1, use the
following

route add -p 200.200.200.200 10.1.1.1
no mask needed for 1:1 routing.

Validate all routing entries with a 'route print'
Also, do not forget the -p, so it will be in place and ready when you
re-boot.

Thomas Poole

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 31, 2000 5:40 AM
To: [EMAIL PROTECTED]
Subject: [FW1] local.arp



Hi all,

I've been installing triple homed (internal, dmz, external) FW-1 4.1 on an
NT box, and everything went fine except for  the ability to see the boxes
in the DMZ from the outside. I strongly suspect the problem is with the
local.arp file I set up, I have heard stories that the process is a bit
unreliable...does anybody have or know of a procedure that will definitely
work for local.arp on NT?


Ian Turner




**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

SCEE
**********************************************************************


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to