Re: [FW1] IP forwarding on NT

[Coelho <coelho@mailandnews.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


At 14:54 04/11/99 -0500, Earl Robinson wrote:
>On the Firewall, the (external) interface connected to the router should
have a default route.
+++ Ok, it has.

> It's default route should be the address of the internal interface of the
router.
+++ Ok, it is.

> The internal interface of the firewall should not have a default route. 
+++ Ok, it hasn't.

>In addition, the router should have a route to the internal netwrok, with
that gateway being the external interface of the firewall.
+++ Ok.

> The routers default gateway should either be some address given to you by
your isp, or something it acquires through a routing protocol.
+++ All right.

>If checking those doesn't resolve it, follow this sequence...

>try (in this order, on the firewall) pinging :
>internal int of firewall
+++ Reply.

>external interface of firewall
+++ Reply.

>internal interface of router
+++ Reply.

>external interface of router
+++ Reply.

>some arbitrary internet address
+++ Reply.

>try (in this order, from a machine inside the firewall) pinging :
>internal int of firewall
+++ Reply

>external interface of firewall
+++ Reply

>internal interface of router
+++ Not ok.

>external interface of router
+++ Not ok.

>some arbitrary internet address
+++ Not ok.

>where in this sequence do you stop getting responses?
+++ Seems it's not routing from internal network to Inet. I tried something
that could be helpful. A trace from Inet to inside my network. It stoped in
our fw gateway. I really don't know what's missing...
+++ Thanx again for your help.

>-earl
>
>Coelho wrote:
>> 
>> Hello,
>> 
>>         I'm not sure, but there's something else to do in a NT box to
make it
>> ready to forward ip packets than check ip forwarding in Network properties?
>>         The situation is:
>> 
>>         Inet --- ROUTER --- FW --- Internal Network
>> 
>>         In TCP/IP Properties the interface connected to ROUTER have its
IP as
>> default gateway and the another one connected to our internal network does
>> not have any default gateway. Clients are pointing to FW as default
gateway.
>>         I think, it should forward packets normally but it won't. I'm
sure I
>> missed something on it, but I'm not find where's it.
>> 
>>         Thanx if you could help me someway.
>> 
>>         André Luiz
>> 
>>
============================================================================
====
>>      To unsubscribe from this mailing list, please see the instructions at
>>                http://www.checkpoint.com/services/mailing.html
>>
============================================================================
====
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================