Barracuda with ASA 5505

I have an ASA 5505 configured on our system which has been working great up until I try to Forward port 25 to a Barracuda spam firewall.  Our smtp and http both come over the same ip address xx.xx.xx.197, so on the ASA the NAT was real 192.xx.xx.115 translated to the xx.xx.xx.197.  My problem is now I need the emails coming over port 25 to go to 192.xx.xx.117.  So when I make the changes on the firewall for (PAT) http to go to 192.xx.xx.115 and smtp to 192.xx.xx.117, everything seemed ok except mails sent to aol are hanging in my exchange server queue.  It only seems to be a problem with aol but there maybe others.

Anytime I add port address translation even if i send it to .115 i get the hang in the Queue.  

I am not a Cisco expert by any shape of the imagination, I only make changes using the ASDM and am not too familiar with Cisco command line, Please don't hold that against me.
chetweewaxAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

3nerdsCommented:
DO you have more than one external address?

If you use PAT instead of NAT on an ASA the traffic will come in .197 but when they go out the will go out your outside interfaces address which maybe .195 or some such.

With static NAT it comes in .197 and then goes back out .197.

The problem with this will be if aol or anyone is doing a reverse dns lookup and now the records don't match.

Good Luck,

3nerds
0
chetweewaxAuthor Commented:
You are correct it goes out .194

Is there a work around?
0
3nerdsCommented:
2 choices,

move smtp or http to a different address if you have one avaliable and then change DNS accordingly.

or

Change the reverse record for .194 to match what is currently on .197

Good Luck,

3nerds
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
chetweewaxAuthor Commented:
Thanks 3nerds ... I contacted my ISP to have the reverse record changed for .194.  And now I am keeping my fingers crossed.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.