🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #511

Re: Incomin NAT Problem with FireWall-1

#511
From: Taoufik GABSI
Date: Tue, 05 Oct 1999 00:00
55 lines
2469 bytes
Hello Olivier,

My problem is that I have an internal use machine 192.168.150.50 (it can not
be sawn from the external network) and I want it to offer ONLY some  HTTP
services to the extrnal network.

So I wanted to configure may NAT like so:
all connection incoming to VALID_IP wil be translated to 192.168.150.50 at a
specific port.
AND
all connection incoming to VALID_IPZ wil be translated to 192.168.150.50 at
another specific port.

Thats why I cant use the automatic translation rule.

In the FW guides, it seems to be so easy to configure.
My Firewall logs say that the incoming packets have been translated to the
right machine on the right service, but my local machine does not see any
thing.

Thank you for your help.

Best regards,

Taoufik GABSI.

Olivier Merlin <omerlin98000@yahoo.com> wrote in message
news:37F8C5BD.DEF0FEAA@yahoo.com...
> Hello Taoufik,
>
> First of all, may I have some information on why and how you want to use
NAT in
> your configuration ?
> IE, do you plan to see your LocalMachine (192.168.150.50) on your side
with an
> "external" NAT address of (for instance) 192.168.160.12 (and try to
communicate
> from your LocalMachine2 192.168.160.50) ??? To be well understood( my
english is
> not perfect), 192.168.160.50 will try to speak with 192.168.160.12 (same
> network), and will go through NAT/FW-1 to your real 192.168.150.50 ?
>
> Second, have you checked the "automatically add translation rules" in your
FW-1
> (with GUI) ?
>
> I think I have the good answer for you, but I just want to understand what
you
> are trying to do before...
>
> If you have already succeeded, just let me know !
>
> Best regards,
> Olivier Merlin
>
Technical Details
Message-ID: <7tc3h8$lqf$1@arcturus.ciril.fr>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <7rr186$9md$1@arcturus.ciril.fr> <37F8C5BD.DEF0FEAA@yahoo.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,227863996b738b73
X-Google-Attributes: gidf922c,public
X-Google-Thread: 110acc,227863996b738b73
X-Google-Attributes: gid110acc,public
From: "Taoufik GABSI" <gabsi@inist.fr>
Subject: Re: Incomin NAT Problem with FireWall-1
Date: 1999/10/05
Message-ID: <7tc3h8$lqf$1@arcturus.ciril.fr>
X-Deja-AN: 532960887
Content-Transfer-Encoding: 8bit
References: <7rr186$9md$1@arcturus.ciril.fr> <37F8C5BD.DEF0FEAA@yahoo.com>
Organization: CIRIL, Nancy, France
X-MSMail-Priority: Normal
X-Priority: 3
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211
Newsgroups: comp.security.firewalls,fr.comp.securite