on splat cpstop and ip forwarding disabled

[jackharv]

if I do a cpstop (using splat) ip forwarding is disabled. I need to re-enable ip forwarding with fw stopped. I realize this is a dumb question, but how do i do this?

[ddarby1]

Not sure if this is such a dumb question.

Executing cpstop or cpstop FW1 will always disable ip forwarding, but on SPLAT, I suppose the answer might be provided by knowing which config file to edit - i.e. a bit of linux & check point knowledge. Then you'd have to go into expert mode to execute the changes.

However the easiest way I can think of achieving the same goal on SPLAT is to leave the firewall daemon running and install a simple one-rule policy where everything can access everything (the reverse of the cleanup rule).

Anyone else care to comment?

[Lackie]

Below is how to enable IP forwaring in Splat.

1) Log into Expert mode after logging in as administrator.
2) Type "echo 1 > /proc/sys/net/ipv4/ip_forward"

To disable it:

1) Log into Expert mode after logging in as administrator.
2) Type "echo 0 > /proc/sys/net/ipv4/ip_forward"