Article View: comp.security.firewalls
Article #510Re: Incomin NAT Problem with FireWall-1
From: Olivier Merlin
Date: Mon, 04 Oct 1999 00:00
Date: Mon, 04 Oct 1999 00:00
49 lines
2632 bytes
2632 bytes
Hello Taoufik, First of all, may I have some information on why and how you want to use NAT in your configuration ? IE, do you plan to see your LocalMachine (192.168.150.50) on your side with an "external" NAT address of (for instance) 192.168.160.12 (and try to communicate from your LocalMachine2 192.168.160.50) ??? To be well understood( my english is not perfect), 192.168.160.50 will try to speak with 192.168.160.12 (same network), and will go through NAT/FW-1 to your real 192.168.150.50 ? Second, have you checked the "automatically add translation rules" in your FW-1 (with GUI) ? I think I have the good answer for you, but I just want to understand what you are trying to do before... If you have already succeeded, just let me know ! Best regards, Olivier Merlin Taoufik GABSI wrote: > I try to configure selected incoming NAT: > > I use FW-1 4.0 on a HP 10.20 machine. > > My local machine is on a private network, > > When I configure an incoming NAT access, I can see incoming translated > packets on my log screen, but they never reach the local machine. > > 15Sep1999" "14:18:11" "lan1" "FireWall" "log" "accept" "http" > "External.machine" "Valid.IP" "tcp" "3" "3969" "" "" "" > "ExternalMachine" "Local.IpName" "3969" "TranslatedService" " len 60" > > arp -s Valid.IP Mac.Addr pub changes nothing. > > I may be have to say that my FW machine is also my gateway, and I can reach > my LocalMachine from another LocalMachine2 in a network in the other side of > the network (trough the gateway/firewall). > Example: > LocalMachine: 192.168.150.50 > LocalMachine2: 192.168.160.50 > FW-GW: 192.168.150.1 AND 192.168.160.1 > I have no problem to route IP packets between LocalMachine and > LocalMachine2 > > Outgoing NAT works well.
Technical Details
Message-ID:
<37F8C5BD.DEF0FEAA@yahoo.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<7rr186$9md$1@arcturus.ciril.fr>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,227863996b738b73 X-Google-Attributes: gidf922c,public X-Google-Thread: 110acc,227863996b738b73 X-Google-Attributes: gid110acc,public From: Olivier Merlin <omerlin98000@yahoo.com> Subject: Re: Incomin NAT Problem with FireWall-1 Date: 1999/10/04 Message-ID: <37F8C5BD.DEF0FEAA@yahoo.com> X-Deja-AN: 532674601 Content-Transfer-Encoding: 7bit References: <7rr186$9md$1@arcturus.ciril.fr> To: Taoufik GABSI <gabsi@inist.fr> X-Accept-Language: fr,en Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@isdnet.net X-Trace: news2.isdnet.net 939050439 20204 195.78.1.77 (4 Oct 1999 15:20:39 GMT) Mime-Version: 1.0 NNTP-Posting-Date: 4 Oct 1999 15:20:39 GMT Newsgroups: comp.security.firewalls,fr.comp.securite