Pix 515 with a Barracuda SPAM FW and SMTP and HTTP access

Jan 04, 2007 1 Replies

I have a Pix 515 v.6.3 using PAT. I have a static translation from my outside network to my inside mail server both for HTTP and SMTP (they are on the same box).



I have an outside ACL that sends all SMTP/HTTP traffic to this SMTP/HTTP box on the inside



I have a Barracuda SPAM FW inside



I have an SMTP server with HTTP web based email access inside (they on the same box. I know, I know)



Visually, it looks like this.



--------------------Barracuda / Dragons ) ------PixFW ----/ --------------------SMTP/HTTP server



On the Pix, I can setup the static translation to point to either the Barracuda -which will forward to the SMTP OK - but I lose connectivity with HTTP. Or, I can ignore the Barracuda -which I don't want to do - and just send all SMTP and HTTP requests to my HTTP server.



Is there a way to have the SMTP traffic head to the Barracuda (then forward the SMTP server) and the HTTP traffic head to by HTTP mail gateway without a static translation in the meantime keeping the HTTP/SMTP box the same?



you can use:

static (inside,outside) tcp x.x.x.x 25 192.168.0.5 25 netmask

255.255.255.255

static (inside,outside) tcp x.x.x.x 80/443 192.168.0.6 80/443 netmask

255.255.255.255

access-list myacl permit tcp any host x.x.x.x eq 25 access-list myacl permit tcp any host x.x.x.x eq 80/443

Now these are PAT translations not static translations, you can only use a static translation with one internal IP and one external IP.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required