 Re: anti-spoof problem
Hi,
Thanks for the reply. Just to clarify a bit - this is a Nokia IP firewall running NG. The problem I have is that it is based in Hong Kong, and I am in London. As I understand it fw unloadlocal will also disable routing on the Nokia. Is this correct? I believe I need to:-
1. disable external interface
2. enable routing (how? - "ipsofwd on admin" ?)
3. fw unloadlocal
4. push the policy from the management console with the topology corrected
What I am most worried about is losing connectivity to the Nokia, or getting to a point where I cannot load a policy.
BTW, the firewall has now also stopped logging!
any advice would be greatly appreciated |