Outbound NAT
-
Having problems setting up Outbound NAT for my Exchange server. I have setup an inbound NAT:
WAN TCP 25 (SMTP) 172.20.30.189 (ext.: 206.13.X.130) 25 (SMTP) SMTP to MAILSERVER Inbound
The Outbound NAT Seems confusing. I need to perform an outbound NAT from the same Internal IP to the Same external IP for email.
InterfaceSource Source Port Destination Destination Port NAT Address NAT Port Static Port Description
Having problems setting up Outbound NAT for my Exchange server. I have setup an inbound NAT:
WAN TCP 25 (SMTP) 172.20.30.189 (ext.: 206.13.X.130) 25 (SMTP) SMTP to MAILSERVER Inbound
The Outbound NAT Seems confusing. I need to perform an outbound NAT from the same Internal IP to the Same external IP for email.
Interface - LAN
Source - 172.20.10.0/24
Source Port *
Destination *
Destination Port *
NAT Address - 206.13.x.130
NAT Port *
Static Port YES(25)
Description - Outbound for Exchange
How would I set this rule up properly?
-
Change LAN to WAN in your outbound nat rule and make sure that rule is on top of the default lan to wan outbound rule. Then it should work.
-
Also:
- That should be 172.20.10.189/32 ext 206.13.x.130
- You shouldn't need static ports for your mail server.
-
Change LAN to WAN and keep the same subnet? I do not have to specify the specific IP address on the inside?
-
Also:
- That should be 172.20.10.189/32 ext 206.13.x.130
- You shouldn't need static ports for your mail server.
Yes, it should be a /32 for the IP. Overread that.
The source is the specific IP. Btw, did you add a VIP for public IP already? I guess yes as the inbound is working ok, right?
-
Yes I set up a VIP.
Is that correct?
Interface - WAN
Source - 172.20.10.189/32
Source Port *
Destination *
Destination Port *
NAT Address - 206.13.x.130
NAT Port *
Static Port No
Description - Outbound for Exchange
-
Also should I set Outbound NAT to Manual or leave it at Automatic?
-
The rule looks good. That will map any traffic from that host to that IP. If you only want smtp for example you could add that to the rule too. Make sure it's above the default lan to wan rule in the list. You need manual outbound nat to be turned on or it won't use your manually entered rules.