RE: [FW1] dnsinfo.C

[Dan O'Neill <DanO@visio.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


The clients need to be configured with WINS addresses either in the IP stack
directly if the client is connecting to the Internet via a network card or
in the Dial Up Networking connectoid (95/98) or Phonebook (NT) if connecting
to the Internet via dial-up.  Unfortunately this is a manual process.

There is no Split-WINS mechanism in FW-1 that I know about and I can't
really think of a reason why you'd need one.  You most likely will not have
an external WINS server...just internal ones.

We are setup in this manner and our clients are able to use WINS to resolve
internal names.  If someone knows of a way to automatically provide clients
with the address of an Internal WINS server I'd like to hear it.

Hope this helps,

Dan

-----Original Message-----
From: Suleman I Patel [mailto:spatel@algorithmics.com]
Sent: Wednesday, November 10, 1999 1:41 PM
To: 'Gorm Jorgensen'
Cc: Fw-1-Mailinglist (E-mail)
Subject: RE: [FW1] dnsinfo.C



Thanks; 
Yes split-DNS, I got it to work. 
But is there a way to have WINS information passed to the client in a
similar way.

Thanks 
Suleman
-----Original Message-----
From: Gorm Jorgensen [mailto:gorm@Area51.DK]
Sent: Wednesday, November 10, 1999 3:37 PM
To: Suleman I Patel
Cc: Fw-1-Mailinglist (E-mail)
Subject: Re: [FW1] dnsinfo.C




On Mon, 8 Nov 1999, Suleman I Patel wrote:

> 
> Has anyone successfully implemented the $FWDIR/conf/dnsinfo.C file to work
> with secuRemote; ie. to pass the DNS server info to the secuRemote client?
> 

If you mean Split-DNS, then Yes.
It is working with SecuRemote 4005, but not with any of the 41xx versions.

One big disadvantage, you have to manually put: 

:dns_xlate (true) 
:dns_encrypt (true)

in the userc.C file under options before it works.

-- 
Gorm Jorgensen - Gorm@Area51.DK



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================