×

Loading...
Ad by
  • 最优利率和cashback可以申请特批，好信用好收入offer更好。请点链接扫码加微信咨询，Scotiabank -- Nick Zhang 6478812600。
Ad by
  • 最优利率和cashback可以申请特批，好信用好收入offer更好。请点链接扫码加微信咨询，Scotiabank -- Nick Zhang 6478812600。

@Calgary

Help needed about CheckPoint FW-1 NG R55, Thanks in advance:

eagle8888(firewall)
本文发表在 rolia.net 枫下论坛I configured Windows 2000 Server(machine A) as a router, machine B using A as the gateway, all was ok.
Then I installed CheckPoint to machine A, setup and installed rlue to enable all services from machine B.
Now I have the problem, I can visit external website from machine A, I can "ping" "tracert" external host from machine B, but I can't visit webpage using browser on machine B, no response come back. In CheckPoint Smartview Tracker, it shows accept http connection from B to external host, another log shows drop http connecion from B to external host, information "TCP packet out of state: First packet isn't SYN tcp_flags: FIN-ACK". If I turn off "Drop out of state TCP packets" in global properties, the second log message will no appear, but I still can't use machine B to visit external webpage.
One interesting thing: if from B, I use "telnet hostname 80" , and "GET ...", most time there is no response, some time I can get the http response and the html source.
Anybody can help me? Thank you very much!更多精彩文章及讨论，请光临枫下论坛 rolia.net
(#2094663@0)
Last Updated: 2005-1-26
This post has been archived. It cannot be replied.
Report

Replies, comments and Discussions:

  • 工作学习 / IT技术讨论 / Help needed about CheckPoint FW-1 NG R55, Thanks in advance: -eagle8888(firewall); 2005-1-26 {1043} (#2094663@0)
    本文发表在 rolia.net 枫下论坛I configured Windows 2000 Server(machine A) as a router, machine B using A as the gateway, all was ok.
    Then I installed CheckPoint to machine A, setup and installed rlue to enable all services from machine B.
    Now I have the problem, I can visit external website from machine A, I can "ping" "tracert" external host from machine B, but I can't visit webpage using browser on machine B, no response come back. In CheckPoint Smartview Tracker, it shows accept http connection from B to external host, another log shows drop http connecion from B to external host, information "TCP packet out of state: First packet isn't SYN tcp_flags: FIN-ACK". If I turn off "Drop out of state TCP packets" in global properties, the second log message will no appear, but I still can't use machine B to visit external webpage.
    One interesting thing: if from B, I use "telnet hostname 80" , and "GET ...", most time there is no response, some time I can get the http response and the html source.
    Anybody can help me? Thank you very much!更多精彩文章及讨论，请光临枫下论坛 rolia.net
    • any CheckPoint expert? -eagle8888(firewall); 2005-1-28 (#2098168@0)
    • i am not -buma(buma); 2005-1-28 {223} (#2098526@0)
      is ur win2000 have 2 ip on the same nic or 2 physical nics? I take assumption that u used 2 nics and with different static IP
      which nat service u r using, from check point? if so, is there any nat rules setup improperly.?
      • Thx. The NAT setting should be correct. -eagle8888(firewall); 2005-1-31 {112} (#2103024@0)
        all check boxes for NAT global properties are enabled as default. The internal network is hidden behind Gateway.

More Topics

  • 老程序员第一次用copilot的一点点体会
  • 现在社区游泳池招救生员巡逻，过一会还要不停的点人头，这工作是否很快就被AI代替了，装一个摄像头后面是AI处理系统，这样只招一个等着救人就行了，人头沉下水一定时间立马强光照射，还可以分析水下人的状况来判断是否溺水等
  • 新冠疫苗引发心肌炎? 最新研究这样看
  • 这道几何题有解吗?
  • SAM 2 Demo
    • 枫下论坛主坛 /  工作学习 /  IT技术讨论