topic Re: dst NAT from inside in Firewall and Security Management

dst NAT from inside

hazyman — Sat, 20 Jul 2019 10:14:51 GMT

Good day!
We need to write a nat rule so that requests from the internal network to the external address and the port of the checkpoint are processed in the same way as requests from the outside when using dst nat

Re: dst NAT from inside

PhoneBoy — Sat, 20 Jul 2019 23:23:59 GMT

You have to basically do a dual NAT, translating both the source and destination.
A somewhat more complicated version of this problem is discussed here: https://community.checkpoint.com/t5/General-Topics/Natting-to-an-IP-range-not-directly-connected/m-p/8498#M1066

Re: dst NAT from inside

FedericoMeiners — Mon, 22 Jul 2019 03:49:00 GMT

I think that the following example will accomplish what you need:

Keep in mind that you may need to set up the proxy ARP for the public IP that you are using.