NAT External URL to local exchange server

[xeon]

Hello experts,

So I have setup pfsense firewall and working fine. What I am trying to accomplish now is to access my local exchange server from externally. When I go to https://mail.domain.com, I want to be able to access my local exchange server.

I need help with NAT rules, please?

Lets take into consideration that using one Public IP, I am trying to access multiple local servers for different services such as ADFS, exchange etc.

Please help

[bepo]

Hello @xeon,

maybe you can follow my How-To. I posted it in https://forum.netgate.com/post/806020
Its in german but just follow the screenshots and you will make it work.

Kind regards

[xeon]

@bepo said in NAT External URL to local exchange server:

Kind regards

Thank you for this. i am stuck at the Front end where there is a rule under "Actions" called scheme https. Can you please provide me more clarity?

[SteveITS]

@xeon said in NAT External URL to local exchange server:

using one Public IP, I am trying to access multiple local servers for different services such as ADFS, exchange

Without a proxy or other special handling, just be aware that with plain old NAT you can only forward each port to one internal IP. So you cannot normally have https://hostname1 go to one server and https://hostname2 go to another server unless you use a different port like https://hostname2:444.

[xeon]

@teamits When you say Proxy, is it a Web Application Proxy server?

[bepo]

@teamits thats why i posted a manual for HAProxy. Using it you can redirect https://hostname1 to server1 and https://hostname2 to server 2. This is handled by SNI (https://en.wikipedia.org/wiki/Server_Name_Indication).

@xeon the http Frontend is for redirecting a http request to https. "scheme https" is the command to do this.

[SteveITS]

@xeon said in NAT External URL to local exchange server:

When you say Proxy, is it a Web Application Proxy server?

@bepo was describing how to use HAProxy.