Or you can listen to someone who knows :)
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> <[EMAIL PROTECTED]> 9/29/00 4:14:59 PM >>>
>
>FW-1 ignores virtual interfaces. You need to define two network objects (
>one per subnet) then create a network group with them in. Then use this
>group in the anti spoofing entry of the physical interface.
>Paul
>--------------------------------------------------------------------------------------------
>
>C. Paul Simons
>Corporate Network Services
>IHS Energy Group, Englewood, CO.
>
> Lance Spitzner <[EMAIL PROTECTED]>
>
> Sent by: To:
>[EMAIL PROTECTED]
> [EMAIL PROTECTED] cc:
>
> kpoint.com Subject: [FW1]
>anti-spoofing on aliased interfaces
>
>
> 29-09-00 12:33
>
>
>I've aliased an interface (hme0:1) on FW ver 4.1, running on Solaris.
>
>Can one add an aliased interface to the interface objects
>on a firewall?
>
>Can one setup anti-spoofing on an aliased interface?
>
>Last, does the aliased interface show up on the 'fw stat -li'
>command?
>
>Thanks!
>
>--
>Lance Spitzner
>http://www.enteract.com/~lspitz
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
