PIX NAT and port forwarding

Answered Question
Aug 27th, 2007

I have installed and new spam filter between the firewall and mail server. I am now using port forwarding. The outgoing traffic for mail is being stamped with my Pix address instead of the mail address. Some of the mail is being rejected becasue the pix outside address has no rDNS. Is there a way to make the out going mail use the mail server external address instead if the PIX external address.

static (inside,outside) tcp x.x.x.10 www x.x.x.37 www netmask 255.255.255.255

static (inside,outside) tcp x.x.x.10 https x.x.x.37 https netmask 255.255.255.255

static (inside,outside) tcp x.x.x.10 pop3 x.x.x.37 pop3 netmask 255.255.255.255

static (inside,outside) tcp x.x.x.10 smtp x.x.x.43 smtp netmask 255.255.255.255

I have this problem too.
0 votes
Correct Answer by hsajwan about 9 years 3 months ago

Use this command and this should resolve your issue:

nat (inside) 10 x.x.x.43

global (outside) 10 x.x.x.10

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
hsajwan Mon, 08/27/2007 - 12:19

Use this command and this should resolve your issue:

nat (inside) 10 x.x.x.43

global (outside) 10 x.x.x.10

Actions

This Discussion