This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need help getting mail to my internal mail server

ASG V8
I have looked and thought I did everything I needed to do but.....
Lets start by saying I use DynDns so I can have such things as a mail and web server. Dyn Dns is sending out the mail on port 2525 because Comcast blocks port 25. This mail is going to come from "IP Range = 216.146.32.0 - 216.146.33.255" or as I have it set up as "216.146.32.0 / 255.255.254.0".
I set up the internal network.
Packet Filter =
Source = Internal (Network)
Service = Email Messaging + port 2525 I made my own including port 2525
Destination = Any

NAT =
Traffic Source = Any
Traffic Service = Email Messaging + port 2525
Traffic Destination = External (WAN) (Network)
NAT mode = (DNAT) Destination
Destination = Mail Server set up like this
-- Type = Host
-- Interface = Any
-- IpAddress = 192.168.0.XX

Destination Service = Empty

I am not getting any emails that I have sent to it by external means.

I came from the IPCop Community and really like this product so please give me some guidance.

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago
The approach you're using now, with the DNAT, is the one to use if you aren't going to use the SMTP Proxy with Mail Security.

If you want to use Mail Security, it's really simple. The steps for your situation are:
[LIST=1]
From the 'Global' tab of 'Mail Security >> SMTP', enable the Proxy in 'Simple' mode.
On the 'Routing' tab, add your domain name, yourdomain.com, select 'Route by :' "Static host list" and put {the host definition for mailserver} in the 'Host list'
On the 'Relaying' tab, in the 'Upstream host list', put {the host definition for the IP of DynDNS service}, and you probably will want to check the 'Allow upstream/relay hosts only' box.
Still on the 'Relaying' tab, put {the host definition for mailserver} in 'Allowed hosts/networks'
On your mailserver, change it to listen & talk on port 25 instead of 2525, and where it points to the DynDNS service, put in the IP of the Astaro's "Internal (Address)"
Finally, change the DNAT that you created to:
Traffic Source = {host definition with IP of the DynDNS service}
Traffic Service = SMTP-Alt
Traffic Destination = External (WAN) (Address)

NAT mode = (DNAT) Destination

Destination = {Empty!}
Destination Service = SMTP

Create another NAT rule for outbound emails:
Traffic Source = External (Address)
Traffic Service = SMTP
Traffic Destination = {host definition with IP of the DynDNS service}

NAT mode = (SNAT) Source

Source = {Empty!}
Source Service = SMTP-Alt

[/LIST]
I think that's all the steps, but please post back here if there's something else you had to do to make it work.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 15 years ago
The approach you're using now, with the DNAT, is the one to use if you aren't going to use the SMTP Proxy with Mail Security.

If you want to use Mail Security, it's really simple. The steps for your situation are:
[LIST=1]
From the 'Global' tab of 'Mail Security >> SMTP', enable the Proxy in 'Simple' mode.
On the 'Routing' tab, add your domain name, yourdomain.com, select 'Route by :' "Static host list" and put {the host definition for mailserver} in the 'Host list'
On the 'Relaying' tab, in the 'Upstream host list', put {the host definition for the IP of DynDNS service}, and you probably will want to check the 'Allow upstream/relay hosts only' box.
Still on the 'Relaying' tab, put {the host definition for mailserver} in 'Allowed hosts/networks'
On your mailserver, change it to listen & talk on port 25 instead of 2525, and where it points to the DynDNS service, put in the IP of the Astaro's "Internal (Address)"
Finally, change the DNAT that you created to:
Traffic Source = {host definition with IP of the DynDNS service}
Traffic Service = SMTP-Alt
Traffic Destination = External (WAN) (Address)

NAT mode = (DNAT) Destination

Destination = {Empty!}
Destination Service = SMTP

Create another NAT rule for outbound emails:
Traffic Source = External (Address)
Traffic Service = SMTP
Traffic Destination = {host definition with IP of the DynDNS service}

NAT mode = (SNAT) Source

Source = {Empty!}
Source Service = SMTP-Alt

[/LIST]
I think that's all the steps, but please post back here if there's something else you had to do to make it work.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 JamesSteen over 15 years ago in reply to BAlfson

WOW!

Ok I did all that you asked. I have a question "Imagine that"

""On your mail server, change it to listen on port 25 instead of 2525, and where it points to the DynDNS service, put in the IP of the Astaro's "Internal (Address)"""

Postfix is already listening on both ports
Put in Astaro's internal address.

Is that the standard
MyNetworks = 192.168.0.1, 127.0.0.1
or the proxy = Comcast's address DHCP

Also disable just the DNAT or both DNAT and packet Filter.
Cancel
Vote Up 0 Vote Down

Cancel
0 JamesSteen over 15 years ago in reply to JamesSteen

Ok did everything you asked am still not sure about the packet filter but I did leave it in place.

Still nothing in my mail server.
Cancel
Vote Up 0 Vote Down

Cancel
0 JamesSteen over 15 years ago in reply to JamesSteen

Here is the log for my connections

14:54:20 Default DROP TCP
216.146.33.208 : 64920
→
68.55.240.176 : 2525

[SYN] len=60 ttl=54 tos=0x00 srcmac=0:1:5c:32:1a:c1 dstmac=0:a0:cc:61:ac:2
14:54:23 Default DROP TCP
216.146.33.208 : 64920
→
68.55.240.176 : 2525

[SYN] len=60 ttl=54 tos=0x00 srcmac=0:1:5c:32:1a:c1 dstmac=0:a0:cc:61:ac:2
14:54:26 Default DROP TCP
216.146.33.208 : 64920
→
68.55.240.176 : 2525

[SYN] len=60 ttl=54 tos=0x00 srcmac=0:1:5c:32:1a:c1 dstmac=0:a0:cc:61:ac:2
14:54:27 Default DROP TCP
216.146.33.20 : 60036
→
68.55.240.176 : 2525

What is this telling us??
Cancel
Vote Up 0 Vote Down

Cancel