[sebastan_bach]

hi mate thanks for ur reply. yeah i got what limboo was saying.

that is i could allow the intranet users to access internal users directly which i can achieve with auto static nat right. but when i want to map the internal host to multiple external ip's i guess manual static nat is the only option we have right.

thanks a lot guys

coldark mate i guess i will have to built those 4 rules. cause as i told u for the internet my network object is actually any .so even though i have a cleanup rule at the end which i have actually.

when the intranet users try to access the ext_ip2 they will get access cause they get matched in the network object of any.

so to restrict the intranet users to access only by ext_ip1 and the internet users to access only by ext_ip2.i guess i will need those 4 rules.

what do u say.

mate thanks a lot once again. learning checkpoint with people like u guys in the forum it;s fun and easy.

thanks to all.

regards

sebastan