Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
NIC changing speed after reboot.
Hello RMCDANIEL, Where are those XP machines connected too? What I can think is that the switch which the machines are connected had the ports set to 100 full but the configuration was not saved and after the reboot it was set to auto... Really wierd. Regards, Abner -
Natting
WindowsFan, Two ways of making this work: - PAT (using the external NIC of your ISA but NATING it to the internal IP address when the port is 110, 25 or whatever you use - asking your ISP for more IP adresses so you can add static NAT to your Mail server and your external ISA server NIC...- abner78br
- Post #4
- Forum: Security, hacker detection & forensics
-
Natting
Hello Windowsfan, NAT should be done in the firewall Regards, Abner- abner78br
- Post #2
- Forum: Security, hacker detection & forensics
-
NAT/tcpdump question
Desperado, Yes the packet is "deNATed" on the kernel. Try to see the FTP logs what is the source IP address of the connection and let me know. If I understand your needs, you want to hide the source and not the FTP server, right? I have a great CCSE training material explaining this NAT...- abner78br
- Post #10
- Forum: Security, hacker detection & forensics
-
2nd Network card locks (doesnt respond to ping) any ideas?
tshotter, Have you tried changing the switch port the second NIC is plugged to? Regards, Abner -
ARP Request
Netomaniac, take a look at this: http://en.wikipedia.org/wiki/ARP http://en.wikipedia.org/wiki/DHCP Regards, Abner -
NAT/tcpdump question
Desperado, The reason why you cannot see the translated address in the external interface is because when the packet exits the network, the Checkpoint kernel translates the packet back to the not XLATED packet using backward address translation. The kernel does this so the client will be able...- abner78br
- Post #6
- Forum: Security, hacker detection & forensics
-
Checkpoint R55 FTP Loadbalancing Question
ATSKI, for sure you'll need NAT to those addresses (and routing entries on your firewall box). However I am not sure about load balancing. I've seen loadbalancing issues regarding FTP. For instance: you request access to one server but the other one replies and your connection drops. I had to...- abner78br
- Post #6
- Forum: Security, hacker detection & forensics
-
Checkpoint R55 FTP Loadbalancing Question
Atski31, Just one more question. How is the FTP servers connected to the Checkpoint Firewall? One interface facing the inside network and the other one facing the DMZ side? Regards, Abner- abner78br
- Post #4
- Forum: Security, hacker detection & forensics
-
NAT/tcpdump question
Desperado618, The reason TCPDUMP is not showing the XLATED address is because the translation is done after the data goes inbound in the firewall. Regards, Abner- abner78br
- Post #4
- Forum: Security, hacker detection & forensics
-
Checkpoint R55 FTP Loadbalancing Question
Hello atski31, What is the OS Checkpoint is installed with? The FTP servers need to be accessed from inside or outside networks? Regards, Abner- abner78br
- Post #2
- Forum: Security, hacker detection & forensics
-
AD Groups / LDAP Groups
Hello Joe, You only have to configure Checkpoint to use LDAP authentication. The users and groups are added/removed in the AD. You just set the correct group for authentication and it is done. Regards, Abner- abner78br
- Post #2
- Forum: Security, hacker detection & forensics
