Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Solved] Bind Machine/IP to specific outgoing WAN Interface

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      werwulf
      last edited by

      Hey, me again.

      This is a follow up to my last question "DNS Rebinding Attack. No access to Server inside DMZ from LAN."
      For technical details please take a look at that post. For the sake of redundancy, I'm not gonna post them here again.

      Here is my dilemma this time. Due tue my setup with the 3 WAN interfaces (and the 100MBit cable dynamic line as default) the mailserver uses that interface to send all the mails.
      Unfortenately this leads to be on some mailing blacklists :).

      Is it possible to bind the internal ip of my mailserver to use with just the static leased line?

      I played with some settings but couldn't get it to work.
      On the 1:1 NAT Docs it is just from WAN to LAN. Not the other way arround.

      I did some more research and found "How to Configure Source NAT (Private IP => Public IP Outbound)" on serverfault.
      Which sums up pretty much what I am trying to do.
      Googling some more on SNAT/Source NAT got me to Outbound NAT in the pfsense Docs.

      So I did that as well. But every time I send an e-mail I still see the dynamic IP in the mailheader.

      Any ideas or tips for me?

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Just set a firewall rule on the internal interface that the mailserver is on. Specify the source IP as the mail server and the gateway as whichever WAN you want to use.

        Steve

        1 Reply Last reply Reply Quote 0
        • W
          werwulf
          last edited by

          @stephenw10:

          Just set a firewall rule on the internal interface that the mailserver is on. Specify the source IP as the mail server and the gateway as whichever WAN you want to use.

          Steve

          It is so easy when you know how it's done. Now I kinda feel stupid.
          But thanks anyways :) Appreciate it very much!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.