Checkpoint Firewall NG hairpin NAT

Posted by Admin on 2017-09-05 21:16:06:

See this article for NAT configuration.

Hairpin NAT configuration:

The above (see the NAT howto) all works very well if your 192.168.1.x hosts sit in a DMZ on the firewall, however!

If you want to direct traffic to a host on the LAN segment, you need some additional NAT rule trickery.

You need to create a so called 'hairpin' NAT rule:

NAT rules:

Dont xlate between lan dmz