This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

masq on internal

Hi!

I have a little problem with NAT/Masquerading.
ASL 5.2 with 3 NICs (internal, external, dmz)
and few additional IPs on internal and external NIC

SMTP server is in dmz.
NAT rule:

smtpdmz smtpserver->Any/SMTP externalsmtp (Address) None

So, every SMTP traffic from server is masqueraded on external interface.

This works fine, except, that now to redirect some SMTP to server in internal network.
Traffic is routed to internal network, but source address is of course externalsmtp (Address), which is not OK.

Is it possible to set rules in such manner, that traffic to internet is masqueraded on external interface, and traffic for internal network is masqueraded on internal interface?

I don't want to use simple masquerading, because NAT should be set to fixed IP address.

This thread was automatically locked due to age.