Article View: comp.security.firewalls
Article #391Re: HTTP not working on CheckPoint Firewall-1 NG
From: Kenny
Date: Tue, 21 Oct 2003 14:45
Date: Tue, 21 Oct 2003 14:45
39 lines
2694 bytes
2694 bytes
Hi All, Thanks for all of tips. I was going to test LAN users access internet though CP Firewall using Dynamic NAT (Hide). After I checked traffic log in firewall and Client end proxy setting, I found there is a MS proxy Client in the testing computer, so, HTTP request has been forced to another proxy server which we disconnected. Thanks for all again. Kenny rick@bcm.tmc.edu (Richard H Miller) wrote in message news:<bn1jsl$2fg@gazette.corp.bcm.tmc.edu>... > Chris (chris@nospam.com) wrote: > > : "Richard H Miller" <rick@bcm.tmc.edu> wrote in message > > : > here is the key right here. You say only hide mode NAT is configured. Any machine > : > that is offering a service that is based on a specific IP/Port must use static mode > : > NAT. Define the WEB server inside with a static NAT address. > : > > > : I think that he is trying to access web pages on the internet from a client > : machine behind the firewall, not access a web server behind the firewall > : from the outside. If this is the case then hide mode is the method to NAT > : all the outgoing traffic from the internal network. > > : Kenny, is this what you are trying to do? > > > Re-reading it is hard to tell. Your reading may be correct. If so, the question is > what version of Checkpoint NG are you running and what type of platform is it on. There > are ARP and routing issues. How did you configure the NAT? > > rick
Technical Details
Message-ID:
<159dc294.0310210645.55b3e8ab@posting.google.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mailReferences:
<159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu> <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net> <bn1jsl$2fg@gazette.corp.bcm.tmc.edu>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,1798d847a870e8ba X-Google-Attributes: gidf922c,public X-Google-Thread: fc559,1798d847a870e8ba X-Google-Attributes: gidfc559,public X-Google-Thread: 102e85,1798d847a870e8ba X-Google-Attributes: gid102e85,public X-Google-ArrivalTime: 2003-10-21 07:45:25 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail From: kennywu@hotmail.com (Kenny) Newsgroups: comp.security.firewalls,fa.firewall,cp.products.firewall-1 Subject: Re: HTTP not working on CheckPoint Firewall-1 NG Date: 21 Oct 2003 07:45:24 -0700 Organization: http://groups.google.com Lines: 39 Message-ID: <159dc294.0310210645.55b3e8ab@posting.google.com> References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu> <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net> <bn1jsl$2fg@gazette.corp.bcm.tmc.edu> NNTP-Posting-Host: 209.183.15.115 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1066747525 8502 127.0.0.1 (21 Oct 2003 14:45:25 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Tue, 21 Oct 2003 14:45:25 +0000 (UTC)