🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #390

Re: HTTP not working on CheckPoint Firewall-1 NG

#390
From: Richard H Miller
Date: Mon, 20 Oct 2003 21:25
22 lines
2108 bytes
Chris (chris@nospam.com) wrote:

: "Richard H Miller" <rick@bcm.tmc.edu> wrote in message

: > here is the key right here. You say only hide mode NAT is configured. Any machine
: > that is offering a service that is based on a specific IP/Port must use static mode
: > NAT. Define the WEB server inside with a static NAT address.
: >

: I think that he is trying to access web pages on the internet from a client
: machine behind the firewall, not access a web server behind the firewall
: from the outside. If this is the case then hide mode is the method to NAT
: all the outgoing traffic from the internal network.

: Kenny, is this what you are trying to do?


Re-reading it is hard to tell. Your reading may be correct. If so, the question is
what version of Checkpoint NG are you running and what type of platform is it on. There
are ARP and routing issues. How did you configure the NAT? 

rick
Technical Details
Message-ID: <bn1jsl$2fg@gazette.corp.bcm.tmc.edu>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsswitch.lcs.mit.edu!bloom-beacon.mit.edu!news.tamu.edu!bcm.tmc.edu!nike!rick
References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu> <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,1798d847a870e8ba
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,1798d847a870e8ba
X-Google-Attributes: gidfc559,public
X-Google-Thread: 102e85,1798d847a870e8ba
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2003-10-20 14:33:28 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsswitch.lcs.mit.edu!bloom-beacon.mit.edu!news.tamu.edu!bcm.tmc.edu!nike!rick
From: rick@bcm.tmc.edu (Richard H Miller)
Newsgroups: comp.security.firewalls,fa.firewall,cp.products.firewall-1
Subject: Re: HTTP not working on CheckPoint Firewall-1 NG
Followup-To: comp.security.firewalls,fa.firewall,cp.products.firewall-1
Date: 20 Oct 2003 21:25:41 GMT
Organization: Baylor College of Medicine, Houston, Tx
Lines: 22
Message-ID: <bn1jsl$2fg@gazette.corp.bcm.tmc.edu>
References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu> <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net>
NNTP-Posting-Host: nike.it.bcm.tmc.edu
X-Newsreader: TIN [version 1.2 PL2]
X-Newsreader: TIN [version 1.2 PL2]