He has hundreds of internal subnets, all of them are /24, however, he finds
it very convenient not to create them all in the rulebase, but to have one
class A object instead. This is a common thing, he probably has an internal
router(s) that are aware of all the subnets.
-----Original Message-----
From: Christine Tran [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 01, 2000 5:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [FW1] Partition off a class C within a 10.x.x.x RFC 1918 net
>"Reed Mohn, Anders" <[EMAIL PROTECTED]> wrote:
>Date: Fri, 1 Dec 2000 00:31:03 +0100
>
>Since any 10.0.0.0 address is assumed to
>be local, no packet ever makes it to the
>FW/router/gateway.
>
>
>>From: Christine Tran [mailto:[EMAIL PROTECTED]]
>>Sent: 30. november 2000 23:06
>>
>>Why is this hard? Am I missing something really obvious?
Yes, clearly .. like my brain. :) I thought Greg's original post intended
for 10.250.1.0/24 to be completely broken off from his intranet. If
he wants to keep the Class A & Class C talking, it wouldn't work.
I'll line up for my allotment of humble pie & forty lashes.
CT
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================