Solved

PIX 506e - Exchange Internal - One Public IP?

Posted on 2004-04-07
3
163 Views
Last Modified: 2010-04-09
HI,
I am trying to get the following scenerio to work:
I have one IP address that the DSL carrier has povied me for the OUTSIDE interface. I need to Have all internal systems go out through this interface ( I am currently using PAT ), I also need to forward port 25 traffic that goes to the OUTSIDE interface to forward to an internal Exchange Server.

The problem that I am having is that when I enable the port 25 translation on the outside interface, I loose the ability to get to the internet from internally.

Can you have the outside interface translate this way, or do I have to get an additional IP from the carrier?
0
Comment
Question by:eheuser
  • 2
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 10777745
Yes, you can use port redirection:
example, using inside IP 192.168.1.61 as your Exchange server:

! first, turn off fixup smtp
no fixup protocol smtp 25

! create a static port map
static (inside,outside) tcp interface 25 192.168.1.61 25 netmask 255.255.255.255

! create an access-list for inbound smtp email
access-list outside_access_in permit tcp any interface outside eq 25
OR:
access-list outside_access_in permit tcp any host (outside IP) eq 25

! apply the access-list
access-group outside_access_in in interface outside

! badabing, that's it !

0
 
LVL 79

Expert Comment

by:lrmoore
ID: 10807732
Are you still working on this? Do you need more information?
0
 

Author Comment

by:eheuser
ID: 10818283
Thanks, I am all set....
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now