Re: Sunscreen EFS 3.1 stealth mode and NAT

[Valerie Anne Bubb <Valerie.Bubb () Sun COM>]

> > have you exempted this traffic from the anti spoofing rules ? These
> > sort of problems on Sunscreen sometimes are caused by anti spoofing
> > stopping traffic.
>
> It appears to be an arp problem. An arp is sent from the external
> router asking for the MAC for the private_dns_nat. The sunscreen
> changes this to an arp for the private_dns address. Nothing replies
> to this. The internal router would need to use proxy arp for the
> private_dns address.
>
> We have decided to do NAT on the internal router.

If you are using SunScreen in Stealth mode, it should take
care of the proxy arps for you automagicly.  Let me look over your
configuration information to see if I can narrow this down.

Valerie

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards