🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #510

Re: Incomin NAT Problem with FireWall-1

#510
From: Olivier Merlin
Date: Mon, 04 Oct 1999 00:00
49 lines
2632 bytes
Hello Taoufik,

First of all, may I have some information on why and how you want to use NAT in
your configuration ?
IE, do you plan to see your LocalMachine (192.168.150.50) on your side with an
"external" NAT address of (for instance) 192.168.160.12 (and try to communicate
from your LocalMachine2 192.168.160.50) ??? To be well understood( my english is
not perfect), 192.168.160.50 will try to speak with 192.168.160.12 (same
network), and will go through NAT/FW-1 to your real 192.168.150.50 ?

Second, have you checked the "automatically add translation rules" in your FW-1
(with GUI) ?

I think I have the good answer for you, but I just want to understand what you
are trying to do before...

If you have already succeeded, just let me know !

Best regards,
Olivier Merlin

Taoufik GABSI wrote:

> I try to configure selected incoming NAT:
>
> I use FW-1 4.0 on a HP 10.20 machine.
>
> My local machine is on a private network,
>
> When I configure an incoming  NAT access, I can see incoming translated
> packets on my log screen, but they never reach the local machine.
>
> 15Sep1999"  "14:18:11"  "lan1"  "FireWall"  "log"  "accept"  "http"
> "External.machine"  "Valid.IP"  "tcp"  "3"  "3969"  ""  ""  ""
> "ExternalMachine"  "Local.IpName"  "3969"  "TranslatedService"  " len 60"
>
> arp -s Valid.IP Mac.Addr pub            changes nothing.
>
> I may be have to say that my FW machine is also my gateway, and I can reach
> my LocalMachine from another LocalMachine2 in a network in the other side of
> the network (trough the gateway/firewall).
> Example:
> LocalMachine: 192.168.150.50
> LocalMachine2: 192.168.160.50
> FW-GW: 192.168.150.1 AND 192.168.160.1
> I have no problem to route IP packets between LocalMachine and
> LocalMachine2
>
> Outgoing NAT works well.
Technical Details
Message-ID: <37F8C5BD.DEF0FEAA@yahoo.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <7rr186$9md$1@arcturus.ciril.fr>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,227863996b738b73
X-Google-Attributes: gidf922c,public
X-Google-Thread: 110acc,227863996b738b73
X-Google-Attributes: gid110acc,public
From: Olivier Merlin <omerlin98000@yahoo.com>
Subject: Re: Incomin NAT Problem with FireWall-1
Date: 1999/10/04
Message-ID: <37F8C5BD.DEF0FEAA@yahoo.com>
X-Deja-AN: 532674601
Content-Transfer-Encoding: 7bit
References: <7rr186$9md$1@arcturus.ciril.fr>
To: Taoufik GABSI <gabsi@inist.fr>
X-Accept-Language: fr,en
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@isdnet.net
X-Trace: news2.isdnet.net 939050439 20204 195.78.1.77 (4 Oct 1999 15:20:39 GMT)
Mime-Version: 1.0
NNTP-Posting-Date: 4 Oct 1999 15:20:39 GMT
Newsgroups: comp.security.firewalls,fr.comp.securite