[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 19
  • Last Modified:

Route email with cisco asa 5515

Hi:

I have a cisco ASA 5515X with two WAN connections and one LAN connection.

As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1.

However, I'm having trouble sending email because the public IP is not matching the inverse DNS record. This record points to the public address of WAN2, but the email is labeled with the IP address of WAN1. How can this happen?

How do I force the outgoing emails to go through WAN2?

By the way, you will notice in the config file that WAN interfaces have private IP's. This is because there is an ADSL router between this interface and the public network.

Thanks
0
ScreenFox
Asked:
ScreenFox
  • 2
  • 2
1 Solution
 
Craig BeckCommented:
No config is attached.
0
 
ScreenFoxAuthor Commented:
Here it is.
cisco.txt
0
 
ScreenFoxAuthor Commented:
anybody there?
0
 
Craig BeckCommented:
Your default WAN link is WAN1, so all traffic will go down that link.  The problem is that the ASA doesn't do policy-based routing, so you can't pick and choose which interface different types of traffic are sent down.  To achieve this you'd need to put a separate ASA on each internet feed and use a standard IOS router to do PBR instead, to send traffic to the correct ISP.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now