|
Posted by cds879 on February 7, 2005, 8:00 am
If you were Registered and logged in, you could reply and use other advanced thread options
Scenario:
Firewall:206.*.*.194(External)/192.*.*.80(Internal)
Server1:206.*.*.221(External)/192.*.*.247(Internal)(Translated through
firewall)
All internal computers are hidden behind the firewall with addresses of
192.*.*.*
I can ping the Server1's internal IP from any computer, but when I ping
it's external IP, I sometimes get 1 reply from Server1's internal IP of
192.*.*.247. Basically, I get no connection to Server1's external IP
from any computer on the internal network. From the outside, I do have
full access to Server1's external IP.
Is there anyway I can set up a route/rule/whatever to make the internal
computers be able to access the Server1's external IP?
Thanks in Advance,
Craig
craig at qualitymetalcraft.com
|
|
Posted by on February 7, 2005, 9:02 pm
If you were Registered and logged in, you could reply and use other advanced thread options
: Scenario:
: Firewall:206.*.*.194(External)/192.*.*.80(Internal)
: Server1:206.*.*.221(External)/192.*.*.247(Internal)(Translated through
: firewall)
: All internal computers are hidden behind the firewall with addresses of
: 192.*.*.*
: I can ping the Server1's internal IP from any computer, but when I ping
: it's external IP, I sometimes get 1 reply from Server1's internal IP of
: 192.*.*.247. Basically, I get no connection to Server1's external IP
: from any computer on the internal network. From the outside, I do have
: full access to Server1's external IP.
: Is there anyway I can set up a route/rule/whatever to make the internal
: computers be able to access the Server1's external IP?
If the natted server is on the same LAN as the internal computers then
you cannot to this in NG and greater versions. You could do this in
pre-NG versions of fw1 (4.1, 4.0, etc..).
Lars
|
| Similar Threads | Posted | | Checkpoint - Deny traceroute through checkpoint firewall | August 10, 2004, 3:27 pm |
| checkpoint | March 17, 2005, 5:12 pm |
| checkpoint fp1 +ike | October 25, 2005, 12:08 am |
| CheckPoint help on | September 15, 2006, 2:37 pm |
| Checkpoint QoS | October 24, 2006, 3:29 pm |
| PIX to checkpoint VPN | August 14, 2007, 1:08 pm |
| checkpoint and static nat | August 3, 2004, 5:19 pm |
| Checkpoint and Cisco 501 | August 29, 2004, 10:47 am |
| Looking at PIX syslogs the CheckPoint way | December 21, 2004, 11:41 am |
| CheckPoint VPN Edge? | January 5, 2005, 8:40 pm |
|