Email server behind pfSense

podilarius

Ah .. okay I see. Looking at the advanced outbound rule you posted, it seems wrong. As the others stated, you need to put this rule above all others in the AON screen. You also need to change the destination port to blank (any). Your server is going to be responding to request on high port with a source port of 25. As others have stated, you also need to change the interface to WAN.
I would open it up first and then lock it down so i would do:

Interface: WAN
Source: INTERNALMAILSERVER
SPort: any
Destination: any
DPort: any
NAT Address: SESRICMailServer
NAT Port: blank (any)

If that works, then just change SPort to 25 if you only want to NAT smtp.

nahid

You can get the configuration picture attached.

PortForward.png_thumb

rules.png_thumb
OutBoundNAT.png_thumb

nahid

Will the above configuration work or is there anything wrong?

podilarius

The configuration from the pics looks good. If it is not working, try restarting the FW.

marcelloc

Nahid,

You have two nats for the same port 80. It will not work.

The rest of your config is fine but you may need to test with bogons rules disabled on wan interface.

podilarius

@marcelloc:

Nahid,

You have two nats for the same port 80. It will not work.

The rest of your config is fine but you may need to test with bogons rules disabled on wan interface.

They are to 2 different servers and 2 hopefully different internal ips (different aliases), so it should be okay.

marcelloc

@podilarius:

They are to 2 different servers and 2 hopefully different internal ips (different aliases), so it should be okay.

That's right podilarius, if web server and mailserver are different wan ip's the nat is fine.

nahid,

Did you changed you pfsense gui port as well disabled webConfigurator redirect rule on system-> advanced?

nahid

marcelloc,

I have done that what you have said. And as podilarius said I have 2 different IP both internally and externally for the respective servers.
I am going to test now whether the above mentioned configuration is working or not.

chpalmer

nahid-

I assume you have set up a VIP for each of your public IP address you intend to use…??

nahid

chpalmer,

What I have to do? I have to create Virtual IP for my Email Server or Aliases is ok?

Could you please explain.

nahid

marcelloc,

_"
nahid,

Did you changed you pfsense gui port as well disabled webConfigurator redirect rule on system-> advanced?"_

I haven't changed it? Do I have to change it? or it ok?

marcelloc

@nahid:

I haven't changed it? Do I have to change it? or it ok?

yes, config these steps to avoid problems on port 80 nat.

chpalmer

@marcelloc:

@nahid:

I haven't changed it? Do I have to change it? or it ok?

yes, config these steps to avoid problems on port 80 nat.

Marcello- he needs a VIP for that external IP doesn't he??

marcelloc

@chpalmer:

Marcello- he needs a VIP for that external IP doesn't he??

The aliases on screen shots suggest that vip/ip alias are configured.

nahid

Marcello,

I am still not sure that what I have to use. Virtual IP or Aliases for my External Mail server forwarding or both of them are ok?

marcelloc

With one firewall, use IP alias. Firewall -> virtual ip-> IP alias

nahid

Marcello,

When I configure OutBound NAT InternalMailServer with the Virtual IP (IP Aliases) IntrnalMailServer (10.10.1.5) could not able to access Internet. Actually it should access through the Internet with its external ip I mean with the virtual ip that configured for it.

How can I solve this?

nahid

Thanks to everybody, the problem has solved through creating the virtual ip as IP Aliases and then NAT them as 1:1 with internal mail server.

Now I want to use Postfix Forwarder with MailScanner.

Marcello, could you please help me to configuring these packages? If possible please give me some screen shots of settings.

Thanks in advance.

marcelloc

@nahid:

Thanks to everybody, the problem has solved through creating the virtual ip as IP Aliases and then NAT them as 1:1 with internal mail server.

Now I want to use Postfix Forwarder with MailScanner.

Marcello, could you please help me to configuring these packages? If possible please give me some screen shots of settings.

Thanks in advance.

Follow this thread to see if posted messages could help you on configuring mailscanner.
I'll post there a small shortcut for a default mailscanner setup.

http://forum.pfsense.org/index.php/topic,43687.msg226301.html#msg226301

nahid

Dear Marcello,

I have installed both postfix and MailScanner. I configured MailScanner as default just providing my domain address in general tab.

Now the problem is how can I configure Postfix forwarder with MailScanner. I came through a post by you where you mentioned that port 25 NAT should be removed and all traffic should be sent to Wan Address. In my case my WAN Address is not my Email Server IP. So what will be the solution here.

Could you please explain a little bit for me.

Thanks a lot.