🚀 go-pugleaf

On Wed, 14 Mar 2001 23:37:40 GMT, Robert Lee Dotson <rob@antiking.com> wrote:
>Whew, it's long winded, I know.
>
>I know it's probably impossible to allow Linux to connect to the
>Checkpoint server using the FW-1's FWZ protocol (since it's proprietary),
>so I need to know if it's possible to connect using IPSEC and ip
>masquerading (and how to do it).
>

On checkpoints site somewhere, there is a pdf that explains how to do
this. -What you need is FreeS/WAN.
Then you can talk IPSEC with Checkpoint FW1.

-- 

I'm a support engineer for Checkpoint FW-1.  Although I don't work for
checkpoint I do have a lot of experience with it.  I would look into this
site
www.phoneboy.com   I have found many answers to problems there.  The site is
privately run and maintained by a Nokia 3rd level support engineer..  Good
Luck


"Robert Lee Dotson" <rob@antiking.com> wrote in message
news:rob-1403011834490001@10.129.6.101...
> Whew, it's long winded, I know.
>
> I know it's probably impossible to allow Linux to connect to the
> Checkpoint server using the FW-1's FWZ protocol (since it's proprietary),
> so I need to know if it's possible to connect using IPSEC and ip
> masquerading (and how to do it).
>
> Here's the scenario:
>
> We've got about 25 programmers who need to dial in from home. ALL of them
> use Linux. Our internal network is protected by the Checkpoint FW-1. All
> of the users NEED to be able to connect to the CVS server which is located
> in the deepest recesses of our LAN. They will be connecting using ADSL
> (PPPoE) and dial-ip (PPP).
>
>
> What to do? Any help would be greatly appreciated.
>
> -Robert Lee Dotson

Greetings!

Enash schrieb:

> > I know it's probably impossible to allow Linux to connect to the
> > Checkpoint server using the FW-1's FWZ protocol (since it's proprietary),
> > so I need to know if it's possible to connect using IPSEC and ip
> > masquerading (and how to do it).

I seriously doubt that you could do any VPN solution with FWZ but IPSEC should
be possible with FreeSWAN (http://www.freeswan.org/).



> > We've got about 25 programmers who need to dial in from home. ALL of them
> > use Linux. Our internal network is protected by the Checkpoint FW-1. All
> > of the users NEED to be able to connect to the CVS server which is located
> > in the deepest recesses of our LAN. They will be connecting using ADSL
> > (PPPoE) and dial-ip (PPP).

Another possibility would be to enable authentication on the firewall and allow
authenticated users to access that one specific server only. Nice side-effect:
the remainder of your LAN will still be protected.  With a(ny) VPN solution the
programmers will be part of your LAN.

Bye
    Volker

--

Volker Tanger  <volker.tanger@detewe.de>
 Wrangelstr. 100, 10997 Berlin, Germany
    DiSCON GmbH - Internet Solutions
         http://www.discon.de/