RE: [FW1] NAT Problem

[Smith, Martin]

Hi,   It all depends on which platform you are running.  You will need to set up a static ARP entries for the external address and possibly a static route.   If you are running on a Nokia box this can all be done via Voyager, if on NT then you will have to do it via the command line and the local.arp file, as for other platforms I’ve no idea because I haven’t used them.   Regards   Martin Smith Internet Development Manager Dow Jones Newswires   Tel: +44 207 842 9873 Fax: +44 207 842 9874 Email: [EMAIL PROTECTED] Web: www.dowjonesnews.com   EMAIL Confidentiality Statement The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Satana Sent: 25 September 2001 09:51 To: [EMAIL PROTECTED] Subject: [FW1] NAT Problem   Hi everybody I've got tihs problem: I have to publish over www an internal machine (which obviously has an internal IP adress) and I have to make FW1 nat its ip to the external ip adress (that is already routed on the right router & CDN). I've made a rule within the "Adress Translation" which says as original packet : SOURCE : Internal IP DESTINATION : Any SERVICE : Any as translated packet: SOURCE : External IP DESTINATION : Original Service : Original And it's obviously installed on FW1 cluster. There's also a rule in security policy: SOURCE : Any DESTINATION : External IP SERVICE : http ACTION : Accept What I have to do now ? To me it seems all fine, but it doesn't work. Where I'm doing it wrong ? Thanks in advance   Lorenzo