Great Circle Associates Firewalls
(March 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Firewall-1's problem
From: Cristiano Aguiar <cristian @ svn . com . br>
Date: Tue, 25 Mar 1997 21:56:48 -0300
To: firewalls-digest @ GreatCircle . COM

Hi everyone,

        I've got a problem with my firewall-1. My network is the following one:

      6
Local---------|        5            2       1
      7       |--------- Firewall-1 --------- Router --------- Internet
Local---------|              |3
      8       |              |
Local---------|              |
                             |4
                        Server Web,
                        Ftp, Mail

caption:

 1 - 200.252.15.33
 2 - 200.252.15.34
 3 - 192.168.255.243
 4 - 192.168.255.244
 5 - 10.0.0.1
 6, 7, 8 - 10.0.0.2, 10.0.0.3, 10.0.0.4


There has been add some routes:

In the router:

        200.252.15.200 mask 255.255.255.255 200.252.15.34

In the Firewall:

        0.0.0.0         mask 0.0.0.0         200.252.15.33
        10.0.0.0        mask 255.0.0.0       10.0.0.1
        200.252.15.0    mask 255.255.255.0   200.252.15.34
        192.168.255.240 mask 255.255.255.248 192.168.255.243       
        200.252.15.200  mask 255.255.255.255 192.168.255.244        

The NAT of the FW-1 exactly this way:

 10.0.0.2         10.255.255.255  hide 200.252.15.34
 192.168.255.244  192.168.255.244 src  200.252.15.200
 200.252.15.200   200.252.15.200  dst  192.168.255.244


My problem is to know, why the machines of the local network (6,7,8) manage
to "ping" to 192.168.255.243, 192.168.255.244, 200.252.15.34, 200.252.15.33,
but they're not able to "ping" to 200.252.15.200


        Why is this happening ???


I'll be grateful for any help,



 -------------------------------------
   Cristiano Aguiar
      cristiano @
 svn .
 com .
 br
	 Cyberian Soluções Integradas
	    Salvador - Bahia - Brasil
 --------------------------------------


Indexed By Date Previous: ATM adapter for SUN
From: Blanche Beube <bbeube @ isginc . com>
Next: Re: ATM adapter for SUN
From: Poole Stephen <u802454 @ lanl . gov>
Indexed By Thread Previous: Re: RE : IE Mail (fwd)
From: Gabriel Dura <dura @ geocities . com>
Next: CERN wwwproxy performance problem.
From: arthurlin @ tpov07 . ENET . dec . com

Google
 
Search Internet Search www.greatcircle.com