NAt to server

[boss_001]

Hi.
I have som problems gettint a 1:1 nat to work.
I´m sure i´m dooing something wrong and not sure to use 1:1 or some else?

My setup: with madeup IPaddresses.

Wan 130.10.20.1
Lan 10.10.12.1

Want to binde an aditional IP for my mail server ie 130.10.20.5 this IP is ONLY for my mail server, how do i do this?

Cheers Henrik

[johnpoz]

Well you would add a vip to your wan of that .5 address and then why do you want 1:1??  Why would you not just port forward the specific ports you need.  Like mail server would be 25 for smtp, do users use imap or pop etc to access their mails on this server.

[boss_001]

Hi.

I´m sure that is my lack of expirence that made me tink 1:1 Nat.
Vip would probaly work too.

I need to hae my mail ser at a dedicated IP thus i have a fiew mail servers and other i like to make them work on ther own IP addresses.

Wan 130.10.20.1 – Web, RDP, VPN and so on.
Mail gate1 130.10.20.2
Mail gate2 130.10.20.3
Exchange 130.10.20.4

[boss_001]

If i want to use vip, what type do i use and how do i make roules in the firewall and/or outgooing NAT?

Type  ?
IP Alias, CARP, Proxy ARP or Other?

[cmb]

@boss_001:

If i want to use vip, what type do i use and how do i make roules in the firewall and/or outgooing NAT?

Type  ?
IP Alias, CARP, Proxy ARP or Other?

Depends on your situation. Usually IP alias.
https://doc.pfsense.org/index.php/What_are_Virtual_IP_Addresses