This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Q's regarding Interface routing (transitioning from Sonicwall)

I'm moving from a Sonicwall setup and trying to duplicate the config in Astaro. Running into a couple of odd entries that appear to be interface routing related.

Mail server is on a private internal address with the following NAT specified (for SMTP/POP3 traffic):

Source[:$]ther firewalled subnets
Translated: Public Mail Server IP
Destination: Public Mail Server IP
Translated: Private Mail Server IP
(ie Loopback NAT)

DNAT External networks port forward to the private IP

SNAT on outgoing services to show public IP

Now, the Sonicwall has an additional entry:

Source: Mail Server Private IP
Translated: Mail Server Public IP
Inbound Interface: Any
Outbound Interface: WAN primary IP

Questions:

1. Do you even need this entry for the Astaro config?
2. If so, how would you configure it? Interface route? If so, what would you specify as the source and destination networks?

Thanks in advance.

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago

My suggested config is fine*, but the current version of the SMTP Proxy functions with the primary interface address, so a NAT rule like 'External (Address) -> SMTP -> Any : SNAT from {additional address}' would be required for it.

* Check out Accessing Internal or DMZ Webserver from Internal network. If there is an issue with internal access, here's another quick-fix: https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/p/39069/133006#133006

Cheers - Bob
PS I don't think I know what the following means:
Now, the Sonicwall has an additional entry:

Source: Mail Server Private IP
Translated: Mail Server Public IP
Inbound Interface: Any
Outbound Interface: WAN primary IP
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 15 years ago

My suggested config is fine*, but the current version of the SMTP Proxy functions with the primary interface address, so a NAT rule like 'External (Address) -> SMTP -> Any : SNAT from {additional address}' would be required for it.

* Check out Accessing Internal or DMZ Webserver from Internal network. If there is an issue with internal access, here's another quick-fix: https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/p/39069/133006#133006

Cheers - Bob
PS I don't think I know what the following means:
Now, the Sonicwall has an additional entry:

Source: Mail Server Private IP
Translated: Mail Server Public IP
Inbound Interface: Any
Outbound Interface: WAN primary IP
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data