SonicWall NAT

Hello Experts!

I have a working NSA2400 with failover (ATT & Comcast).

All my inbound mail flows via ATT (X1) and outbound via Comcast (X5). I would like to have outbound mail also flow via (X1) instead of going through the other NAT on X5.

How can that be adjusted?

Thanks much!

Marek
LVL 2
maredzkiAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
N-WConnect With a Mentor Commented:
This is more of a routing question because the Sonicwall automatically creates the NAT rules for WAN connections when you initially set them up. All you should need to do is add a static route for the X1 interface.

Login to your management interface, go to Network --> Routing and create a new entry with the following details:

Source: (Your mail server)
Destination: Any
Service: SMTP
Gateway: X1 Default Gateway
Interface: 1
Metric: 1
Disable route when the interface is disconnected: Checked

This will make all outbound SMTP go through X1 (ATT) and will still allow outbound SMTP through X5 (Comcast) in case the X1 WAN link is down.

As Perarduaadastra has mentioned, you will need to change DNS records but this should be a PTR record, not MX. You'll need to contact your ISP for them to change the PTR for your public IP address to something like "mail.mydomain.com".
0
 
PerarduaadastraConnect With a Mentor Commented:
Just set an outbound rule for SMTP traffic to go out on the X1 interface.

However, if you're running your own mail server you will need to adjust your MX records to include the X1 public IP address, or you'll find that your mailserver gets star billing on numerous RBLs.
0
 
maredzkiAuthor Commented:
Thanks to both of you for the answer.

Marek
0
The Lifecycle Approach to Managing Security Policy

Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.

 
maredzkiAuthor Commented:
N-W, in your notes about
Interface: 1
, should that actually say X1?

Marek
0
 
N-WCommented:
Yes, that should say X1.
0
 
PerarduaadastraCommented:
N-W, I stand corrected. I should have indeed said that the PTR record needs to be updated, not the MX one.
0
All Courses

From novice to tech pro — start learning today.