This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NAT setup help

I am setting up a firewall/NAT for a neighbor.  He needs more that I have, so there are some things I can't figure out from the all too brief manual.  Perhaps there as some helpmes on this...

Basically there will be a number of systems behind the firewaa/NAT.  All have to get out.

One system is a server that needs both acesss out and in.

The server will have HTTP, HTTPS, FTP, SMTP, POP, and a few other servers running on it.

There is only one public address available and that is mapped to the public interface of the firewall.

I did some basic DNAT setup so that HTTP and FTP are working.  I know that for HTTPS, I have to move the firewall admin to another port.

What about SMTP as it is both in and out?

Can I set up basic masqurading for the internal network so that everyone can get out?

Is there some good examples of how to do all this????

Thanks!

This thread was automatically locked due to age.

0 uncue75 over 22 years ago

[ QUOTE ]

What about SMTP as it is both in and out?


[/ QUOTE ]

You can do both smtp and pop3 two ways.  you can destination NAT ports 25 and 110 or you can setup smtp and pop3 proxies on the firewall.  this will make it so no one can directly connect to the servies themselves.

[ QUOTE ]

Can I set up basic masqurading for the internal network so that everyone can get out?


[/ QUOTE ]

Yup.  just masqerade the WAN/External/Internet interface to both your DMZ and your LAN network.

[ QUOTE ]

Is there some good examples of how to do all this????


[/ QUOTE ]

check out this  thread.  There is a link at the bottom for initial setup.  there is also a web dmz guide  here.  everything you want to do can be applied to it.

for smtp to work, you will need make sure that the server can get out to dns (port 53) so it can lookup names.

that should get you started...
Cancel
Vote Up 0 Vote Down

Cancel