Does Lotus Domino have to use NAT through the firewall?

Posted on 2009-04-28
Last Modified: 2013-12-18
My Notes server (7.02) is configured with it's own external IP address in the Notes Network Ports\Server Configuration document.  The IP address is using NAT through the firewall (Sonicwall 2040).  Can I remove the NAT?  Can I change the External IP in the Notes Nework Ports document to the WAN Public IP?  Is there any benefit in doing so?  
Question by:keicy01
    LVL 46

    Expert Comment

    by:Sjef Bosman
    Why your question, is something not working, is there a problem?

    I can only tell what we always do in smaller environments: we give a server its own internal (10.x.x.x) IP-address, and in order to allow external users or servers to contact the server, port 1352 in the router is routed to this server.

    A more secure setup would be a separate Domino server in a DMZ, and Domino passthru to the inside server.

    Author Comment

    I am concerned about security.  We will be changing all public IPs as we are changing providers, so I thought that this would be the time to plug any security holes.  Is it less secure to have Notes Nat'd with it's own external IP or does it have to be this way?
    LVL 46

    Accepted Solution

    Everything you're asking is in the Admin Help database. I'd never hook up a Domino server using an external IP-address. At least a router, an internal IP-address and only one port open for Notes RPC. You can make communication via that port a lot safer, by encrypting the traffic. See "Encrypting NRPC communication on a server port" in the Help db. If you think that's not safe enough, add a VPN.

    Here's some good info about DMZs:

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    For Desktop Techs: How to retain a user's Notes configuration data when swapping out the end user's computer. (Assuming that you are not upgrading to a completely different version of Notes client) All you need to do is: 1) install Notes o…
    Article by: Rob
    Notes 8.5 Archiving Steps and Tips This article covers setting up a Notes archive, and helps understand some of the menu choices making setting up and maintaining a Notes archive file easier.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now