<div>
Oh shame on me! Even if I double-checked the policy item, I didn't realize that there was NAT enabled. Thanks so much!<br />
Michael
</div>


Oh shame on me! Even if I double-checked the policy item, I didn't realize that there was NAT enabled. Thanks so much!
Michael

<div>
<div class="content wysiwyg-content">
I'm using a FortiGate FGT-60D firewall (V 5.0) and I configured a local mailserver (192.168.40.20) for my e-mail traffic. For this purpose I set up a MX record for my domains pointing to my external IP (connected to WAN1 of my firewall). I also defined a so-called 'Virtual IP' which forwards from external IP address/range 0.0.0.0 to internal ip address/range 192.168.40.20, protocol TCP and external service port 25 mapped to port 25.<br />
Mail gets through correctly, but when I'm viewing my logs, every mail seems to come from 192.168.40.1, which is my firewall. That's a problem when people tries to spam or attack me, because I can't block that address. When my mailserver does, no more mail is received.<br />
I guess there's a setting in my firewall for the original sender's IP address being passed to the mailserver, but I can't find it right now.<br />
Any experts? :)<br />
<br />
TIA,<br />
Michael
</div>
</div>


I'm using a FortiGate FGT-60D firewall (V 5.0) and I configured a local mailserver (192.168.40.20) for my e-mail traffic. For this purpose I set up a MX record for my domains pointing to my external IP (connected to WAN1 of my firewall). I also defined a so-called 'Virtual IP' which forwards from external IP address/range 0.0.0.0 to internal ip address/range 192.168.40.20, protocol TCP and external service port 25 mapped to port 25.
Mail gets through correctly, but when I'm viewing my logs, every mail seems to come from 192.168.40.1, which is my firewall. That's a problem when people tries to spam or attack me, because I can't block that address. When my mailserver does, no more mail is received.
I guess there's a setting in my firewall for the original sender's IP address being passed to the mailserver, but I can't find it right now.
Any experts? :)

TIA,
Michael

Port forwarding on Fortigate firewall

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

An email client, email reader or more formally mail user agent (MUA) is a computer program used to access and manage a user's email. A web application that provides message management, composition, and reception functions is sometimes also considered an email client, but more commonly referred to as webmail.

Internet / Email Software

Within Internet message handling services (MHS), a message transfer agent or mail transfer agent (MTA) or mail relay is software that transfers electronic mail messages from one computer to another using a client–server application architecture. A MTA implements both the client (sending) and server (receiving) portions of the Simple Mail Transfer Protocol (SMTP). The terms mail server, mail exchanger, and MX host may also refer to a computer performing the MTA function. The Domain Name System (DNS) associates a mail server to a domain with mail exchanger (MX) resource records containing the domain name of a host providing MTA services.