Accessing Checkpoint FW-1 from Linux via ppp

Article View: comp.security.firewalls

Article #5

Back to comp.security.firewalls Previous Next

From: Robert Lee Dotson
Date: Wed, 14 Mar 2001 23:37

19 lines
1785 bytes

Whew, it's long winded, I know.

I know it's probably impossible to allow Linux to connect to the
Checkpoint server using the FW-1's FWZ protocol (since it's proprietary),
so I need to know if it's possible to connect using IPSEC and ip
masquerading (and how to do it).

Here's the scenario:

We've got about 25 programmers who need to dial in from home. ALL of them
use Linux. Our internal network is protected by the Checkpoint FW-1. All
of the users NEED to be able to connect to the CVS server which is located
in the deepest recesses of our LAN. They will be connecting using ADSL
(PPPoE) and dial-ip (PPP).


What to do? Any help would be greatly appreciated.

-Robert Lee Dotson

Technical Details

Message-ID: <rob-1403011834490001@10.129.6.101>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!logbridge.uoregon.edu!feeder.qis.net!feed2.onemain.com!feed1.onemain.com!newsfeed2.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,15f5e30de407684a,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: 100902,15f5e30de407684a,start
X-Google-Attributes: gid100902,public
X-Google-ArrivalTime: 2001-03-14 15:38:10 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!logbridge.uoregon.edu!feeder.qis.net!feed2.onemain.com!feed1.onemain.com!newsfeed2.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mail
From: rob@antiking.com (Robert Lee Dotson)
Newsgroups: comp.security.firewalls,at.mail.firewalls
Subject: Accessing Checkpoint FW-1 from Linux via ppp
Message-ID: <rob-1403011834490001@10.129.6.101>
User-Agent: NewsWatcher-X 2.2.3b1
Lines: 19
Date: Wed, 14 Mar 2001 23:37:40 GMT
NNTP-Posting-Host: 208.1.93.2
X-Complaints-To: abuse@earthlink.net
X-Trace: newsread2.prod.itd.earthlink.net 984613060 208.1.93.2 (Wed, 14 Mar 2001 15:37:40 PST)
NNTP-Posting-Date: Wed, 14 Mar 2001 15:37:40 PST
Organization: EarthLink Inc. -- http://www.EarthLink.net