We're running CP 4.1 SP1 on AIX 4.3.2
Steve
On Tue, 13 Mar 2001 00:28:37 -0500, Jarrett Goetz wrote:
> Steve, you may possibly need to add a proxy ARP entry. BTW, what
platform
> are you using?
>
> Jarrett
>
> -----Original Message-----
> From: Steve Meeters [mailto:[EMAIL PROTECTED]]
> Sent: Monday, March 12, 2001 21:36
> To: [EMAIL PROTECTED]
> Subject: [FW1] NAT problems
>
>
>
>
> We are migrating from a managed firewall service to our own CP firewall
and
> I have one connection that I'm having trouble making work with the CP.
>
> We have a web site at an external hosting service. Customers can fill out
a
> form and submit the information to a web server located behind our
firewall.
> The internal web server uses a private IP address. The hosted web site is
> set up to send the submitted information to port 81 on the external
> interface of the firewall. The firewall then forwards the information to
> port 80 of the internal web server.
>
> I've set up the following rule:
>
> Source = IP address of the hosted web site
> Destination = IP address of the external interface of the firewall
> Service = Port 81
> Action = Accept
> Log = Long
>
> I've also set up the following static NAT:
>
> Original Packet
> Source = IP address of the hosted web site
> Destination = IP address of the external interface of the firewall
> Service = Port 81
>
> Translated Packet
> Source = IP address of the hosted web site
> Destination = IP address (private) of the internal web server
> Service = Port 80
>
> The firewall logs show the information is being received and accepted on
the
> external interface and the translation is being performed, however
nothing
> shows up at the internal web server.
>
> Any suggestions?
>
> Thanks,
> Steve
>
>
>
>
>
> _______________________________________________________
> Send a cool gift with your E-Card
> http://www.bluemountain.com/giftcenter/
>
>
>
>
>
============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions
at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
_______________________________________________________
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
