SUMMARY: Firewall-1,Solaris 2.6, and NAT

From: Angel Alejandro Vega Soto (LCI) (avega@helios.lci.ulsa.mx)
Date: Tue Sep 21 1999 - 23:01:01 CDT


I want to Thank a lot to:

Marco Greene <mgreene@sympatico.ca> Deepak
Wilson <dwilson@imsn.net>
Robert Hayne <robert@pegasus.cuug.ab.ca>
Val Brebene <VBrebene@broadway.bigpond.com>
Fischer, Johan <Johan.Fischer@cognition.se>

All of them tell me, how to fix my problem.

I also want to thank to:

Craig Russell <crussell_1969@yahoo.com>
Dave Maupin<dmaupin@bitstream.com>

Who tell me that Chekpoint has a mailing list, that should be better if
this kind of questions will posted over there.

The Solution in 4 easy steps.

1.- Get rid of any aliases of the cards, in both Solaris and in the
Firewall object.

( rm /etc/hostname.hme0:1)

2.- In the Webserver object, create it with and internal IP address, and
use NAT static to a real ip addrees.

3.- Inside solaris, create and arp entry, of the Real IP address to be
used by the web server, with the MAC address of hme0, wich comes to the
internet.

ifconfig hme0

arp -s 200.23.246.197 "8:34:a:23:78" pub

(this was the step i haven't do before)

4.- make a route in solaris, to make the real ip, to get to the internal
ip.

route add 200.23.246.197 192.168.5.2 1

, and that's it! the ip forwarding must be disabled.

+---------------------------------+--------------------------------------+
| Angel Alejandro Vega Soto | http://welcome.to/alexpixel |
| avega@helios.lci.ulsa.mx | Universidad La Salle |
| alex@centauri.lci.ulsa.mx | Laboratorio de Computo de Ingenierķa|
+---------------------------------+--------------------------------------+
| El miedo lleva a la ira esta hacia el odio y este hacia el sufrimiento |
+------------------------------------------------------------------------+



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:13:26 CDT