Hi all,
I'm still banging my head against the wall with this pesky problem. It makes no sense why it's not working. All I need is traffic for SMTP to enter and exit via the same IP, but it seems like a big headache to do this. I would think the PIX can do this, anyway, here's the config as it's currently, followed by my modifications:
!Brings traffic into the anti-spam server static (inside,outside) xxx.xxx.xxx.115 192.168.5.10 netmask
255.255.255.255 0 0 !pool if IPs NAT's to the internal addresses as default global (outside) 1 xxx.xxx.xxx.117-xxx.xxx.xxx.124 netmask
255.255.255.240 nat (inside) 1 0.0.0.0 0.0.0.0 ! nat (inside) 0 access-list NO_NAT !
When this config is in use, the following happens. Email comes in via the static command, into the anti-spam server, then it leaves via exchange. The problem is that the exchange server now send it out via a random IP out of the global range. So I tried solving it by doing the following:
! static (inside,outside) tcp xxx.xxx.xxx.115 smtp 192.168.5.10 smtp netmask 255.255.255.255 0 0 ! global (outside) 1 xxx.xxx.xxx.117-xxx.xxx.xxx.124 netmask
255.255.255.240 nat (inside) 1 0.0.0.0 0.0.0.0 global (outside) 2 xxx.xxx.xxx.115 nat (inside) 2 192.168.5.1 255.255.255.255 ! nat (inside) 0 access-list NO_NAT !
What's happening is that the exchange server can now send out mail fine, since I NAT'd it's inside IP to the outside IP. It comes out as xxx.xxx.xxx.115, which is fine. However, incoming email is now failing. Even if I use the same static line as before, it fails as long as the new NAT line is active. Anyone have an idea why this is happening?
cos