I currently am NAT'ing all RFC-1918 addresses out the firewall to the Internet. However, I want outgoing mail to appear to originate from a different IP.
So, 10.0.0.1 NATs out as 1.1.1.50
10.0.0.2 (a mail server) should browse Internet appearing to be 1.1.1.50
10.0.0.2 should connect to remote tcp/25 appearing to be from 1.1.1.75
I am sure it can be done. If you create an access list for the e-mail traffic, and a separate one for other traffic, and apply each to a different nat statement. The syntax for the nat is a bit different for a router or PIX/ASA,you don't say which you have, but is broadly the same technique.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
