🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #391

Re: HTTP not working on CheckPoint Firewall-1 NG

#391
From: Kenny
Date: Tue, 21 Oct 2003 14:45
39 lines
2694 bytes
Hi All,

Thanks for all of tips.

I was going to test LAN users access internet though CP Firewall using 
Dynamic NAT (Hide).

After I checked traffic log in firewall and Client end proxy setting,
I found there is a MS proxy Client in the testing computer,
so, HTTP request has been forced to another proxy server which we disconnected.

Thanks for all again.

Kenny


rick@bcm.tmc.edu (Richard H Miller) wrote in message news:<bn1jsl$2fg@gazette.corp.bcm.tmc.edu>...
> Chris (chris@nospam.com) wrote:
> 
> : "Richard H Miller" <rick@bcm.tmc.edu> wrote in message
>  
> : > here is the key right here. You say only hide mode NAT is configured. Any machine
> : > that is offering a service that is based on a specific IP/Port must use static mode
> : > NAT. Define the WEB server inside with a static NAT address.
> : >
>  
> : I think that he is trying to access web pages on the internet from a client
> : machine behind the firewall, not access a web server behind the firewall
> : from the outside. If this is the case then hide mode is the method to NAT
> : all the outgoing traffic from the internal network.
>  
> : Kenny, is this what you are trying to do?
> 
> 
> Re-reading it is hard to tell. Your reading may be correct. If so, the question is
> what version of Checkpoint NG are you running and what type of platform is it on. There
> are ARP and routing issues. How did you configure the NAT? 
> 
> rick
Technical Details
Message-ID: <159dc294.0310210645.55b3e8ab@posting.google.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail
References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu> <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net> <bn1jsl$2fg@gazette.corp.bcm.tmc.edu>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,1798d847a870e8ba
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,1798d847a870e8ba
X-Google-Attributes: gidfc559,public
X-Google-Thread: 102e85,1798d847a870e8ba
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2003-10-21 07:45:25 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail
From: kennywu@hotmail.com (Kenny)
Newsgroups: comp.security.firewalls,fa.firewall,cp.products.firewall-1
Subject: Re: HTTP not working on CheckPoint Firewall-1 NG
Date: 21 Oct 2003 07:45:24 -0700
Organization: http://groups.google.com
Lines: 39
Message-ID: <159dc294.0310210645.55b3e8ab@posting.google.com>
References: <159dc294.0310200837.74df0d6a@posting.google.com> <sIWkb.2892$lw6.36160611@newssvr21.news.prodigy.com> <bn1dlr$ph@gazette.corp.bcm.tmc.edu> <bn1h5o$jsk$1@newsreaderg1.core.theplanet.net> <bn1jsl$2fg@gazette.corp.bcm.tmc.edu>
NNTP-Posting-Host: 209.183.15.115
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1066747525 8502 127.0.0.1 (21 Oct 2003 14:45:25 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Tue, 21 Oct 2003 14:45:25 +0000 (UTC)