Article View: comp.security.firewalls
Article #511Re: Incomin NAT Problem with FireWall-1
From: Taoufik GABSI
Date: Tue, 05 Oct 1999 00:00
Date: Tue, 05 Oct 1999 00:00
55 lines
2469 bytes
2469 bytes
Hello Olivier, My problem is that I have an internal use machine 192.168.150.50 (it can not be sawn from the external network) and I want it to offer ONLY some HTTP services to the extrnal network. So I wanted to configure may NAT like so: all connection incoming to VALID_IP wil be translated to 192.168.150.50 at a specific port. AND all connection incoming to VALID_IPZ wil be translated to 192.168.150.50 at another specific port. Thats why I cant use the automatic translation rule. In the FW guides, it seems to be so easy to configure. My Firewall logs say that the incoming packets have been translated to the right machine on the right service, but my local machine does not see any thing. Thank you for your help. Best regards, Taoufik GABSI. Olivier Merlin <omerlin98000@yahoo.com> wrote in message news:37F8C5BD.DEF0FEAA@yahoo.com... > Hello Taoufik, > > First of all, may I have some information on why and how you want to use NAT in > your configuration ? > IE, do you plan to see your LocalMachine (192.168.150.50) on your side with an > "external" NAT address of (for instance) 192.168.160.12 (and try to communicate > from your LocalMachine2 192.168.160.50) ??? To be well understood( my english is > not perfect), 192.168.160.50 will try to speak with 192.168.160.12 (same > network), and will go through NAT/FW-1 to your real 192.168.150.50 ? > > Second, have you checked the "automatically add translation rules" in your FW-1 > (with GUI) ? > > I think I have the good answer for you, but I just want to understand what you > are trying to do before... > > If you have already succeeded, just let me know ! > > Best regards, > Olivier Merlin >
Technical Details
Message-ID:
<7tc3h8$lqf$1@arcturus.ciril.fr>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<7rr186$9md$1@arcturus.ciril.fr> <37F8C5BD.DEF0FEAA@yahoo.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,227863996b738b73 X-Google-Attributes: gidf922c,public X-Google-Thread: 110acc,227863996b738b73 X-Google-Attributes: gid110acc,public From: "Taoufik GABSI" <gabsi@inist.fr> Subject: Re: Incomin NAT Problem with FireWall-1 Date: 1999/10/05 Message-ID: <7tc3h8$lqf$1@arcturus.ciril.fr> X-Deja-AN: 532960887 Content-Transfer-Encoding: 8bit References: <7rr186$9md$1@arcturus.ciril.fr> <37F8C5BD.DEF0FEAA@yahoo.com> Organization: CIRIL, Nancy, France X-MSMail-Priority: Normal X-Priority: 3 Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Newsgroups: comp.security.firewalls,fr.comp.securite