Firewall-1: Can Internal Hosts Share One Public IP With Static and Hidden NAT?
in [Firewalls]
|
Prev: Sonicwall tz150 DCHP Scope
Next: Audit Windows, Oracle, MSSQL and Cisco routers from single solution
From: Will on 17 Apr 2008 02:34 We have two mail servers: one for incoming mail and one for outgoing, and both are behind Firewall-1. I want them to be seen on the Internet as a single IP address. Can I have a single common public address that exists both in a static and hidden translation rule at the same time? I would configure the incoming mail server with a static rule, so that incoming packets to that public IP get directed by the firewall to the incoming mail server. I would configure the outgoing mail server with a hidden automatic NAT rule that points to the same public IP, so that outgoing packets from that mail server get NAT'd to the common public IP. I know this works for more than one host to share one public IP using hidden translation, but I don't know yet if it would work with a single public IP using both a static and hidden rule. Any advice on this is appreciated. -- Will
From: larstr on 19 Apr 2008 20:17 Will <westes-usc(a)noemail.nospam> wrote: : We have two mail servers: one for incoming mail and one for outgoing, and : both are behind Firewall-1. I want them to be seen on the Internet as a : single IP address. Can I have a single common public address that exists : both in a static and hidden translation rule at the same time? Try using a normal automatic static setup for the inbound connection and setup a manual rule with a hide rule for the outbound connection. Lars
From: Wayne on 20 Apr 2008 07:20
Lookup "smtp security server" in the help files, you'll need that to get the incoming mail traffic working. If you're not sure, check CD2 and the \Docs directory. Wayne McGlinn Brisbane, Oz "Will" <westes-usc(a)noemail.nospam> wrote in message news:G8mdnamF3YQfcpvVnZ2dnUVZ_tyknZ2d(a)giganews.com... > We have two mail servers: one for incoming mail and one for outgoing, and > both are behind Firewall-1. I want them to be seen on the Internet as a > single IP address. Can I have a single common public address that > exists both in a static and hidden translation rule at the same time? > > I would configure the incoming mail server with a static rule, so that > incoming packets to that public IP get directed by the firewall to the > incoming mail server. I would configure the outgoing mail server with a > hidden automatic NAT rule that points to the same public IP, so that > outgoing packets from that mail server get NAT'd to the common public IP. > > I know this works for more than one host to share one public IP using > hidden translation, but I don't know yet if it would work with a single > public IP using both a static and hidden rule. Any advice on this is > appreciated. > > -- > Will > > > > |