This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Inbound port 25 blocked by ISP, open external port 26 to internal port 25

Hi,

We just replaced our LANCOM router with a Sophos UTM 120.
I'm using a new out of the box UTM with version 9.005-16.

Because our ISP is blocking inbound port 25, we asked our antispam provider to deliver our email on port 26. This worked great with the LANCOM router.

I just created a new NAT rule on the Sophos UTM, but somehow it isn't working.

This is my NAT rule:

Position: 0
Rule Type: DNAT (Destination)
For traffic from: ANY
Using service: SMTP26 (service def.: TCP Dest. port: 26, Source port: 1:65535)
Going to: External (WAN address)
Change destination to: Mailserver
And the service to: SMTP
Automatic firewall rule: enabled.

If I telnet port 26 on our public IP, I get nothing.
In the internal LAN I can connect to the mailserver on port 25.
What am I doing wrong?

These are my masquerading rules:
Rule 1: Internal (network) -> External (WAN)
Rule 2: Any -> Internal


This thread was automatically locked due to age.
Parents
  • You don't need a masquerading rule from outside to internal (any -> internal).
    Only from internal to external is usually needed.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Reply
  • You don't need a masquerading rule from outside to internal (any -> internal).
    Only from internal to external is usually needed.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Children
No Data