Re: HTTP not working on CheckPoint Firewall-1 NG

Article View: comp.security.firewalls

Article #389

Back to comp.security.firewalls Previous Next

#389

From: Chris
Date: Mon, 20 Oct 2003 20:39

36 lines
2519 bytes

"Richard H Miller" <rick@bcm.tmc.edu> wrote in message
news:bn1dlr$ph@gazette.corp.bcm.tmc.edu...
> Beoweolf (Beoweolf-spam@pacbell.net) wrote:
> : What are your rules? Did you verify / install after configuring?
> : What is in the log?
>
>
> : "Kenny" <kennywu@hotmail.com> wrote in message
> : news:159dc294.0310200837.74df0d6a@posting.google.com...
> : > Hi,
> : >
> : > I encountered a problem when I setup Checkpoint Firewall-1 NG on the
> : > network.
> : >
> : > For easy to identify the problem, I enabled "any" "any" services on
the
> : > gateway (Firewall-1).
> : >
> : > It is only running NAT (hide) on the Firewall.
>
> here is the key right here. You say only hide mode NAT is configured. Any
machine
> that is offering a service that is based on a specific IP/Port must use
static mode
> NAT. Define the WEB server inside with a static NAT address.
>

I think that he is trying to access web pages on the internet from a client
machine behind the firewall, not access a web server behind the firewall
from the outside. If this is the case then hide mode is the method to NAT
all the outgoing traffic from the internal network.

Kenny, is this what you are trying to do?

Chris.

Technical Details

Message-ID: <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!diablo.theplanet.net!news.theplanet.net!not-for-mail

References:

<159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,1798d847a870e8ba
X-Google-Attributes: gidf922c,public
X-Google-Thread: 102e85,1798d847a870e8ba
X-Google-Attributes: gid102e85,public
X-Google-Thread: fc559,1798d847a870e8ba
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2003-10-20 13:39:20 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!diablo.theplanet.net!news.theplanet.net!not-for-mail
From: "Chris" <chris@nospam.com>
Newsgroups: comp.security.firewalls,fa.firewall,cp.products.firewall-1
Subject: Re: HTTP not working on CheckPoint Firewall-1 NG
Date: Mon, 20 Oct 2003 21:39:20 +0100
Lines: 39
Message-ID: <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net>
References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu>
NNTP-Posting-Host: 213.249.144.138
X-Trace: newsreaderg1.core.theplanet.net 1066682360 20372 213.249.144.138 (20 Oct 2003 20:39:20 GMT)
NNTP-Posting-Date: 20 Oct 2003 20:39:20 GMT
X-Complaints-To: abuse@theplanet.net
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300

Reply to Parent Message