How do I re-direct smtp traffic from PIX to Internal Mail Server?
I have a PIX 506E (PIXOS 6.2(2) ) with a single routeable static IP address (10.20.30.123 in config below) using PAT to translate internal traffic to the outside interface. From home I access the internal network via VPN (split-tunnel arrangement using Cisco VPN Client 3.6) in order to get mail from the internal mail server (working well).
I want to have all traffic to smtp port 25 directed to an internal mail server (192.168.0.22 in config below).
When I try to add a translation rule to redirect port 25 (smtp) from my outside interface ip to my internal mail server (server1) I get the following error message (using PDM 2.0(2)):
"host outside 10.20.30.123 is derived from the IP address of interface outside. You cannot specify translation rule for it"
I instead tried to add an Access Rule to allow traffic from port 25 of the external interface to the internal mail server, and I got the following error:
"No static Network Address Translation (NAT) rule is configured for the destination host or network on interface outside. Would you like to add a static NAT rule for the host or network now?"
QUESTION: How can I redirect all port 25 traffic from my static ip address (which is also the outside interface) to my internal mail server?
Config listing attached at end. All help appreciated!
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...