Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Outbound NAT Choices

    Scheduled Pinned Locked Moved NAT
    1 Posts 1 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      warmbowski
      last edited by

      Hello. I am looking for some advice on selecting between two configurations for an outbound NAT situation. I have an email server with an internal IP address of 192.168.0.8.
      Currently it uses a dedicated VIP (CARP) of X.X.X.27 when receiving email (and other email related connections). This inbound connection is set up as a port forward:

      If      Proto    Ext. port range    NAT IP                        Int. port range
      WAN      TCP      25 (SMTP)          192.168.0.8 (ext.: X.X.X.27)    25 (SMTP)

      Unfortunately, my email server is still set up to use the interface IP address of X.X.X.26 for outbound connections (i.e. sending email). This gets me into some trouble with email servers that compare the HELO address (.26) to the DNS resolved address (.27).

      I noticed that I may have two choices for configuring the outbound connections to use X.X.X.27. Please tell me which you think would be the better way between these two:

      Manual Outbound NAT Rule:

      Interface  Source              SrcPrt  Dest    DestPrt  NATAddress    NATPort  StaticPort
      WAN        192.168.0.8/32      *      *          *        X.X.X.27      *          NO

      1:1 NAT:

      Interface          External IP          Internal IP
      WAN                X.X.X.27/32          192.168.0.8

      Things to note:
      X.X.X.27 will be dedicated to the email server IP address and no other internal IP address will share it.
      I am already using manual outbound NAT mainly to map my primary LAN (192.168.0.0/24) to the default interface IP address (X.X.X.26) and also to map my secondary LAN (192.168.100.0/24) to a VIP (PARP) IP address (X.X.X.30). This email server falls within the primary LAN. I am oblivious to the difference between a PARP and a CARP address and where I can and cannot use each type.

      Thanks for any input.

      -Paul

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.