How do I add a port to a service already created on my firewall Watchguard Firebox x700?

mduplay
mduplay used Ask the Experts™
on
I have a firebox x700 that was setup with a http/https service mapping a outside ip to inside ip for my webserver. The only port assigned to this was 80, i need to add port 25. how can i do this without delting what is already there? or do i need to delete the service and recreate?

second question- i already have a smtp service set up for another server using this port. if i add port 25 to another box with that mess up anything? thanks!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
setup with a http/https service mapping a outside ip to inside ip for my webserver

you mean to say NAT?

in this case u dont have to delete policy just add  new policy for smtp service (port)

second question- i already have a smtp service set up for another server using this port. if i add port 25 to another box with that mess up anything?

again same question

did you already configured NAT for SMTP port ?

how many external IP(public IP addresses u have?)
if two then you can do

1PUBLIC IP -> OLDBOX
2PUBLIC IP-> WEBSERVER R NEWBOX

BUT U CANT ADD NAT FOR  ONE EXTERNAL IP TO 2 INTERNAL IP ADDRESS ON SAME PORT

CAN YOU EXPLAIN BRIEFLY WT IS YOUR REQUIREMENT?






Top Expert 2007
Commented:
You are right if you wish to add ports to an existing service then you first need to delete the existing service; add ports to the template, then add the new service. Better off add a new service for only port 25.

No, adding multiple services would not hamper the existing service, one thing to note here is, you cannot use same public IP and port 25 and redirect to another internal server.
You have option to configure 1-1 NAT or static NAT, if the public IP in question is not the IP of the external interface of the firebox, I would suggest you to use 1-1 NAT [please note if you use 1-1 NAT you cannot use this public address for port redirection for any other internal server other than one single internal server].

Please let know if you need more details.

Thank you.

Author

Commented:
Thank you

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial