Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
KatiaCruz
Employee
Employee

Redirect NTP and DNS requests through NAT

Hi Team,

 

One of our customers needs to redirect all outbound NTP requests to the Internet to their internal NTP server only so that when internal users try to hit an external NTP server they’re really talking to the customer’s internal NTP server – and be none the wiser. The customer wants to do the same with the DNS requests. The goal is to prevent users from using external NTP and DNS servers without reconfiguring their laptops.

 

This seems like an easy thing to do with NAT, and we found out that some vendors provide a solution through NAT, but Check Point doesn't allow us to configure a NAT rule with Many-to-One in the destination field.

Here is essentially what the customer wants to do: https://www.linuxincluded.com/ntp-server-ip-blacklisted-nat-redirection-ftw/. And attached is a screen capture of the NAT rule we are trying to install with no success.

 

Is there any NAT trick that can be used to get this to work? 

The customer is open to implementing a workaround if we can provide one.

 

Thanks,

Katia

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

Covered here: https://community.checkpoint.com/t5/General-Topics/Redirecting-DNS/m-p/65403#M13353
Basically you'll have to create several NAT rules for "common" DNS/NTP servers people use and block the rest.
For something more elegant, it's likely an RFE and, given you're an employee, should engage internally with Solution Center.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events