On Mon, 27 May 2002, Antony Stone wrote:

> Second packet (SYN-ACK) is from 192.168.0.11 to 213.84.165.198.   Good.
>
> Source MAC address is 00:D0:B7:74:17:FD.   This is your web server, I'm sure.
>
> However, the destination MAC address is 00:06:5B:3A:60:7D.
>
> What is this machine ???   It sure isn't your firewall - that's why the
> firewall is showing [UNREPLIED] in its connection tracking table - the
> packets are going to some other ethernet address on the network.


Duh, this is the internal ethercard (192.168.0.1) of our production
firewall.....
The one I am trying to configure now is a test machine.

So having two firewalls is a problem...
Is it by concept possible to have portmapping on two firewalls at the same
time? Or do I need to configure extra gateways on the internal webserver?


Thanks,

-- 
Dick Visser
TERENA IT-support
Singel 468D, 1017 AW, Amsterdam, The Netherlands
Phone: +31 20 5304488        Fax: +31 20 5304499
Email: [EMAIL PROTECTED]       http://www.terena.nl
Live webcam: http://www.terena.nl/~dick/cam2.asx
PGP-key:  http://www.terena.nl/~dick/pgp.key.asc




Reply via email to