I have a range of ip address, and have all my LANs nat'ed to a single IP address.
All this works fine.
Now I want to add a static entry, to port forward SMTP arriving on my public IP address to an internal server.
(The outgoing traffic from the internal server normally gets nat'ed as with the rest of the lan to x.x.x.114)
I add an entry like
ip nat inside source static tcp x.x.x.118 25 192.168.1.9 25
I see the static translation in the sh ip nat translations.
However, when I try and telnet to port 25 of the public IP address x.x.x.118, I get a connection refused.
I have disabled ACLs for that address range, and have tested telneting from the router to the target server, specifying the external IP address as the source and it works.
I also have another server, which is completely staticly nat'ed to an external IP address, (with no tcp/udp ports) and that works fine.
However, I dont want to staticly nat 192.168.1.9 for all ports. Just for SMTP.
Any ideas what I may be doing wrong ?