-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It sounds like the firewall isn't going to be involved with this at all, as all the machines involved are on the local network. I believe the problem is that domain resolution is happening on a DNS server out on the internet at large so you're getting your public IP address; the problem is that your firewall isn't smart enough to forward these packets to a different internal host.
The solution is going to be to run your own internal DNS server so that sites are properly resolved, or make changes to your "hosts" files which will do the same thing. At least, that's the fix if I understand your problem correctly. At 09:49 AM 3/4/2003, you wrote: >Sonicwall Pro300, default deny all from lan to wan, >with about 25 or so allowed protocols for our hardware >and software to communicate with other servers and >devices using our proprietary stuff. > >But since the protocols are set up individually, I >can't find a way to deny *all* traffic to a single WAN >IP. For instance, we have web, ftp, telnet, etc >allowed from WAN to LAN. But let's say I want to keep >that going, but block EVERYTHING to a single IP. >Since the deny falls after all the allow rules, it >still won't fire off to deny all traffic to that IP. > >Is there some way to work this other than having to >make a deny rule specific to this single IP for every >protocol? > >Thanks for any info > >J > > >__________________________________________________ >Do you Yahoo!? >Yahoo! Tax Center - forms, calculators, tips, more >http://taxes.yahoo.com/ > >To Post a message, send it to: [EMAIL PROTECTED] >To Unsubscribe, send a blank message to: >[EMAIL PROTECTED] > >Your use of Yahoo! Groups is subject to >http://docs.yahoo.com/info/terms/ _______________________________________ Encrypted e-mail preferred -- key available from: http://www.zeanah.com/dz.asc -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 Comment: Encrypted e-mail preferred iQA/AwUBPmTQgQStfHGSxzPqEQJSnwCgzIUIqyFVJTo2Ke2o6gr9je8EkRQAoJfU Xhw2Yl6EAdH5RfwAoVYnRDI+ =3OiJ -----END PGP SIGNATURE----- --- [This E-mail scanned for viruses by Declude/F-Prot AV] =================================================================================================== To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
