Re: [FW-1] Gurus in this list. Please help

2006-01-17 Thread David DeSimone
Charalambos Klitiropoulos [EMAIL PROTECTED] wrote: what is the OS these systems use? In Linux you can configure he order in which the system will try to resolve a host name (/etc/host.conf) - unless this is a very weird application that does DNS resolution on its own. Changing

Re: [FW-1] Gurus in this list. Please help

2006-01-16 Thread Kevin . J . Nevala
What about changing the host file on the Checkpoint device? I answer this with a question because my first response was adjusting the host file on the other 2 servers. Apparently that was already thought of and shot down. Kevin

Re: [FW-1] Gurus in this list. Please help

2006-01-16 Thread cisco4ng
1) changing host file on the checkpoint device will not do any good because the application itself will always use DNS instead of host file. 2) running a local DNS server on each host is not possible. They are appliance, Linux-based but I can't install any extra packages on there or

Re: [FW-1] Gurus in this list. Please help

2006-01-16 Thread Charalambos Klitiropoulos
Hello, what is the OS these systems use? In Linux you can configure he order in which the system will try to resolve a host name (/etc/host.conf) - unless this is a very weird application that does DNS resolution on its own. I think I had seen sometime ago in RedHat installations the default was

Re: [FW-1] Gurus in this list. Please help

2006-01-16 Thread Ray
FYI, the one place we learned that this is not true is when a proxy server is defined, at least Microsoft's ISA 2000 proxy server. ISA does the DNS resolution on behalf of their web proxy clients. We discovered (the hard way) that modifying the local HOSTS file had absolutely no effect at all.

[FW-1] Gurus in this list. Please help

2006-01-15 Thread cisco4ng
Hi Gurus, Please advise with the following scenario: Checkpoint Secureplatform NG with AI R55w and the lastest HFA_04. This firewall has 3 interfaces, Internet, Internal and Dmz. I have a host in my Internal network with an IP address of 192.168.1.10. This host is static NAT to

Re: [FW-1] Gurus in this list. Please help

2006-01-15 Thread Ramki Security
Did you tried putting the internal IP addressed in those machines local host table. This should by pass the dns server and resolve the fqdn locally to the private IP addressRamki cisco4ng wrote: Hi Gurus, Please advise with the following scenario: Checkpoint Secureplatform NG

Re: [FW-1] Gurus in this list. Please help

2006-01-15 Thread Ronny Nussbaum
Hello Cisco4ng. I was wondering: can you edit each server's hosts file, so that the other server's name gets resolved to the IP address that you want? That way, DNS will not even be used when one wants to access the other. -RoNNY On 1/15/06, cisco4ng [EMAIL PROTECTED] wrote: Hi Gurus,

Re: [FW-1] Gurus in this list. Please help

2006-01-15 Thread cisco4ng
I wish that it could be that easy. The problem is that this stupid application will always use DNS instead of hosts file. Therefore, changing the hosts file will not do me any good. I contacted the vendor and they say it will take about 2 week to come up with a fix for this.