A common gotya (particularly on older CP's) is the flawed proxy arp functionality in Windows NT. I'm making a lot of assumptions about your setup here, so I could be way off. If so, please disregard.
Assuming the following: 1. CP 4.0 or older, running on Windows NT 2. You have the appropriate translation rules in place 3. You're translating on an IP to which firewall's underlying operating system is not bound The common gotya is the need to manually update the windows ARP table, or add a static route from the upstream router to the translated IP address. On the upstream router from the firewall: ex: (this syntax may be hosed but you'll get the idea) route add <target External translated IP> mask 255.255.255.255 gw <External IP of firweall> -or- The process for manually adding an arp entry on NT: arp -s <Target External translated IP> <MAC address of firewall external IP> Again, this problem may be specific to older checkpoint builds on NT4 based systems. > -----Original Message----- > From: CURTIS FLETCHER [mailto:[EMAIL PROTECTED]] > Sent: Friday, November 30, 2001 12:13 PM > To: [EMAIL PROTECTED] > Subject: firewall 1 help > > > i am trying to give access to an internal server to an > outside agency and > am having problems getting an inside server redirected from > the outside. > does anone have any ideas, have aleady tied the checkpoint database. > thanks. >