CIPortAuthority
asked on
Publish Email Server through Checkpoint 2210 Firewall
We have a new Checkpoint 2210 firewall running Gaia R76 and I'm playing around learning how to use it (we had ISA Server 2004 before this). My first challenge is publishing SMTP access to our mail server (Exchange 2003 running on Server 2003 Std). This is our network:
Internet -> Router (192.168.40.1) -> (192.168.40.2) Firewall (172.16.1.254) -> Mail Server (172.16.1.23)
We only have a single "real" Internet IP address for the whole company.
I setup a host node for the mail server (Savanah) and the firewall's external IP address (ADSL). I then created an address range to cover our 172.16.0.0 network (Internal). Then, I created 2 NAT rules:
Source Dest Srv Source Dest Srv
Savanah Any Any ADSL Original Original
Any ADSL smtp Original Savanah Original
I also created the policy rule:
Source Dest Srv Action Track
Not Internal ADSL smtp accept log
Finally, I installed the policy. I can see in SmartView Tracker that packets are being accepted and that the XlateDest column shows that the destination IP address is being changed to Savanah. But, attempts to connect are just timing out. What am I missing?
Internet -> Router (192.168.40.1) -> (192.168.40.2) Firewall (172.16.1.254) -> Mail Server (172.16.1.23)
We only have a single "real" Internet IP address for the whole company.
I setup a host node for the mail server (Savanah) and the firewall's external IP address (ADSL). I then created an address range to cover our 172.16.0.0 network (Internal). Then, I created 2 NAT rules:
Source Dest Srv Source Dest Srv
Savanah Any Any ADSL Original Original
Any ADSL smtp Original Savanah Original
I also created the policy rule:
Source Dest Srv Action Track
Not Internal ADSL smtp accept log
Finally, I installed the policy. I can see in SmartView Tracker that packets are being accepted and that the XlateDest column shows that the destination IP address is being changed to Savanah. But, attempts to connect are just timing out. What am I missing?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.