Re: [FW1] NAT on DMZ?

[Karim Amrani <kamrani@cogelog.com>]

Hi,

The answer to your question is yes. That's exactly what we are doing and it works.
The only possible drawback is that certain protocols don't like NAT (like RTSP for
real-audio/video traffic). I guess those protocols are not well handled by FW
software and all this is going to be possible with NAT.

HTH,
Karim AMRANI

Domenico Viggiani wrote:

> Hi,
> I read a few of recently posted messages about 'definition of DMZ';
> someone said: 'It is a net with regular addresses between the router and
> the internal network'.
> Now I'd like to know: is it possible to have non-routable addresses on
> the DMZ and to use NAT on the third interface of the router?
>
> Thanks and sorry for my bad english
> --
> -------------------------------------------------------------------
> Domenico Viggiani   -    Systems Administrator
> Pitagora S.p.A.
> PGP Key available on http://www.geocities.com/RainForest/2658/sign.txt
> -------------------------------------------------------------------
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================

    [ Part 2, "Card for Karim AMRANI"  Text/X-VCARD (Name: "kamrani.vcf")  ]
    [ 11 lines. ]
    [ Unable to print this part. ]