Solved

Publish Email Server through Checkpoint 2210 Firewall

Posted on 2013-06-07
1
964 Views
Last Modified: 2013-06-11
We have a new Checkpoint 2210 firewall running Gaia R76 and I'm playing around learning how to use it (we had ISA Server 2004 before this).  My first challenge is publishing SMTP access to our mail server (Exchange 2003 running on Server 2003 Std).  This is our network:
   
    Internet -> Router (192.168.40.1) -> (192.168.40.2) Firewall (172.16.1.254) -> Mail Server (172.16.1.23)

We only have a single "real" Internet IP address for the whole company.

I setup a host node for the mail server (Savanah) and the firewall's external IP address (ADSL).  I then created an address range to cover our 172.16.0.0 network (Internal).  Then, I created 2 NAT rules:

    Source      Dest    Srv      Source     Dest        Srv
    Savanah   Any      Any     ADSL       Original   Original
    Any           ADSL   smtp   Original   Savanah  Original

I also created the policy rule:

    Source            Dest    Srv       Action   Track
    Not Internal   ADSL   smtp   accept   log

Finally, I installed the policy.  I can see in SmartView Tracker that packets are being accepted and that the XlateDest column shows that the destination IP address is being changed to Savanah.  But, attempts to connect are just timing out.  What am I missing?
0
Comment
Question by:CIPortAuthority
1 Comment
 

Accepted Solution

by:
CIPortAuthority earned 0 total points
ID: 39237572
It turns out that the packets were getting through to the mail server but it had the wrong default gateway so nothing was getting back to the firewall. I was getting confused because I could ping the mail server from the firewall (and even Telnet to port 25) but couldn't get through from the Internet.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SonicWALL TZ 300 and SonicPoint ACe INT 11 72
Sonicwall Wireless Subinterface not working 2 64
Turn off SIP ALG - Cisco ASA 5505 1 73
Cisco ASA 3 27
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question