-----Original Message-----
Subject: [fw-wiz] Static nat to a distant network?

> Is it possible to do a static nat from my outside interface to a host

which is one hop away from my dmz
> interface by just putting it in normally:
>
> static (dmz,outside) 10.1.1.200 10.1.3.200
>
> where:
> outside = 10.1.1.199
> dmz = 10.1.2.199
> distant network 10.1.3.0/24


To be clear, the issue is that you want to NAT a server that is local to
your PIX's dmz interface to its outside interface? And there's a router
between the PIX's dmz interface and the server? If that's the case, then
yes, this will work just fine.

PaulM


_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailma...rewall-wizards