Article View: comp.security.firewalls
Article #388Re: HTTP not working on CheckPoint Firewall-1 NG
From: Richard H Miller
Date: Mon, 20 Oct 2003 19:39
Date: Mon, 20 Oct 2003 19:39
37 lines
2361 bytes
2361 bytes
Beoweolf (Beoweolf-spam@pacbell.net) wrote: : What are your rules? Did you verify / install after configuring? : What is in the log? : "Kenny" <kennywu@hotmail.com> wrote in message : news:159dc294.0310200837.74df0d6a@posting.google.com... : > Hi, : > : > I encountered a problem when I setup Checkpoint Firewall-1 NG on the : > network. : > : > For easy to identify the problem, I enabled "any" "any" services on the : > gateway (Firewall-1). : > : > It is only running NAT (hide) on the Firewall. here is the key right here. You say only hide mode NAT is configured. Any machine that is offering a service that is based on a specific IP/Port must use static mode NAT. Define the WEB server inside with a static NAT address. Also, as a rule, *never* do any/any/accept. Use a any/any/deny/log to see what you are denying but do not let it through. : > : > From internal network client, I can ping, tracert, lookup external : internet : > website and public ip address by FQDN. : > : > But from IE in client computer, I can not open the web page, even I : entered : > website ip address directly in the IE address bar. : > : > Is there some special setting for HTTP access though checkpoint firewall : > gateway?
Technical Details
Message-ID:
<bn1dlr$ph@gazette.corp.bcm.tmc.edu>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.cis.ohio-state.edu!news.dfci.harvard.edu!news.harvard.edu!news.rice.edu!newsfeed.rice.edu!rice!bcm.tmc.edu!nike!rickReferences:
<159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,1798d847a870e8ba X-Google-Attributes: gidf922c,public X-Google-Thread: fc559,1798d847a870e8ba X-Google-Attributes: gidfc559,public X-Google-Thread: 102e85,1798d847a870e8ba X-Google-Attributes: gid102e85,public X-Google-ArrivalTime: 2003-10-20 12:50:06 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.cis.ohio-state.edu!news.dfci.harvard.edu!news.harvard.edu!news.rice.edu!newsfeed.rice.edu!rice!bcm.tmc.edu!nike!rick From: rick@bcm.tmc.edu (Richard H Miller) Newsgroups: comp.security.firewalls,fa.firewall,cp.products.firewall-1 Subject: Re: HTTP not working on CheckPoint Firewall-1 NG Followup-To: comp.security.firewalls,fa.firewall,cp.products.firewall-1 Date: 20 Oct 2003 19:39:39 GMT Organization: Baylor College of Medicine, Houston, Tx Lines: 40 Message-ID: <bn1dlr$ph@gazette.corp.bcm.tmc.edu> References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> NNTP-Posting-Host: nike.it.bcm.tmc.edu X-Newsreader: TIN [version 1.2 PL2]