[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewalls-gc
Subject:    Re: Can't Access "inside URL" from an "inside client"
From:       "Rick" <Rick () UKSysops ! com>
Date:       2000-09-16 22:28:05
[Download RAW message or body]

Take out the technical stuff, add a hangover, and thats what I was trying to
tell him. :)

Rick

----- Original Message -----
From: Michael Nelson <mikenel@iapetus.com>
To: Harry Whitehouse <harry@envmgr.com>
Cc: <firewalls@Lists.GNAC.NET>
Sent: Saturday, September 16, 2000 11:17 PM
Subject: Re: Can't Access "inside URL" from an "inside client"


> What's probably happening is that the outgoing packet is going through the
> PIX (because you are using the external address), and then to the actual
> web server. Since the web server is probably on the same network
> (logically speaking) as your browsing machine, the response doesn't go
> through the PIX; it sends it directly back to the client machine. Because
> the responses don't go through the PIX, the originating address on those
> packets don't get translated to the web server's public (NAT'd) address.
> Your browser machine expects a response from the web server's public
> address, not its internal address.
>
> -mike
>
>
> -
> [To unsubscribe, send mail to majordomo@lists.gnac.net with
> "unsubscribe firewalls" in the body of the message.]
>

-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]

[prev in list] [next in list] [prev in thread] [next in thread]