CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > NAT (Network Address Translation)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-05-08
Junior Member
 
Join Date: 2006-05-07
Posts: 2
Rep Power: 0
DZEIDMAN has an average reputation (10+)
Default Accessing the worldwide accessable NAT inside LAN

I would like to access the worldwide accessable NAT inside our LAN.
We currently have an internal IP address 10.10.1.55 with a NAT attached to a valid IP address (e.g.: 205.x.x.x) accessible outside the LAN.
Users access this IP address to access a POP3 (port 110) connection.

How can I configure Checkpoint to allow access to the valid IP address (e.g.: 205.x.x.x) as opposed to the internal IP address 10.10.1.55 when they are working within the LAN?
Reply With Quote
  #2 (permalink)  
Old 2006-05-08
Senior Member
 
Join Date: 2006-01-26
Location: Moscow, Russia
Posts: 706
Rep Power: 3
kva.kva has an average reputation (10+)
Default Re: Accessing the worldwide accessable NAT inside LAN

If i understand correctly, you want to connect to pop3 from Internet on Valid IP and to pop3 from LAN on private IP. Is it correct?
In this case you can use one rule (any source | server_ip_private | pop3) and one object with private IP (using Automatic Address Translation rule in object properties).
Reply With Quote
  #3 (permalink)  
Old 2006-05-16
Junior Member
 
Join Date: 2006-05-07
Posts: 2
Rep Power: 0
DZEIDMAN has an average reputation (10+)
Default Re: Accessing the worldwide accessable NAT inside LAN

Quote:
Originally Posted by kva.kva
If i understand correctly, you want to connect to pop3 from Internet on Valid IP and to pop3 from LAN on private IP. Is it correct?
In this case you can use one rule (any source | server_ip_private | pop3) and one object with private IP (using Automatic Address Translation rule in object properties).
I will clarify: I want to connect to pop3 from Internet on Valid IP and to pop3 from / within LAN on Valid IP and not the Private IP.
Reply With Quote
  #4 (permalink)  
Old 2006-05-16
Senior Member
 
Join Date: 2006-01-26
Location: Moscow, Russia
Posts: 706
Rep Power: 3
kva.kva has an average reputation (10+)
Default Re: Accessing the worldwide accessable NAT inside LAN

Really I don't know how use CP nat for that (if you use NAT on one CP module for pop3 server with private IP.)
May be more simple is using dns servers? And resolve dns name of pop3 server for WAN to external IP and for LAN to internal IP.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 13:05.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0