full-disclosure - PIX vs CheckPoint

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <0E565C4C9391DE4D856F725294E8730D01DDFA8F@MI8NYCMAIL04.Mi8.com>
From: pwicks at oxygen.com (James Patterson Wicks)
Subject: PIX vs CheckPoint

That is odd.  When dealing with a Pix firewall, no traffic can go out an interface without some sort of translation statement.

Even the default configuration has this:

     nat (inside) 1 0.0.0.0 0.0.0.0 0 0

There must be either a static or dynamic translation statement in your configuration.

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Cyril Guibourg
Sent: Wednesday, June 30, 2004 2:18 PM
To: Otero, Hernan (EDS)
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] PIX vs CheckPoint

"Otero, Hernan         (EDS)" <HOtero@...chile.cl> writes:

> I think you do, because at least a nat 0 it?s needed to get traffic passing
> through the pix.

This is odd, I do have a running config under 6.2 without any nat statement.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

This e-mail is the property of Oxygen Media, LLC.  It is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. Distribution or copying of this e-mail or the information contained herein by anyone other than the intended recipient is prohibited. If you have received this e-mail in error, please immediately notify us by sending an e-mail to postmaster@...gen.com and destroy all electronic and paper copies of this e-mail.