×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Smtp server on DMZ, Web access with a 827

Unanswered Question
Jul 10th, 2002
User Badges:

I use a 827 to connect to internet (with nat overlaod).

The connexion gives a public IP address. I use a private Ip address on ethernet0 on the router and another one on the outside interface of the pix.

I have two other Public IP addresses.

I want to use one to host a smtp server on the dmz using a static(dmz, outside) "pubic ip adress" "private dmz ip address"

I am having problems presenting the public ip address of the smtp server on Internet.


The connexcion from inside to the dmz is Ok (static).

The connexion from dmz to outside is ok, i can send mail.

The connexion from inside to outside is ok, i can surf.


Can someone help me.


Thanks


Bruno

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
gfullage Thu, 07/11/2002 - 20:37
User Badges:
  • Cisco Employee,

Is this a PIX or an 827 router? The static command is for a PIX, but you mention you have an 827.


Anyway, for a PIX you'd do:


static (inside,dmz) netmask 255.255.255.255 0 0

access-list from-outside permit tcp any host eq 25

access-group from-outside in interface outside


For an 827 you'd do:


ip nat inside source static


and then allow that traffic in if you have an access-list.

Actions

This Discussion