|
Posted by Paul Smedshammer on May 2, 2008, 12:05 am
If you were Registered and logged in, you could reply and use other advanced thread options
>> PIX 501 Multiple Outside Ports to Single Inside Port.
>> What I'm trying to do is forward two outside port 25 and port 587 to
>> our inside server listening on port 25. Is this possible with a PIX
>> 501?
>> We are currently using:
>>
>> static (inside,outside) tcp interface smtp 10.0.0.2 smtp netmask
>> 255.255.255.255 0 0
>>
>> if I add another line in say:
>>
>> static (inside,outside) tcp interface 587 10.0.0.2 smtp netmask
>> 255.255.255.255 0 0
>>
>> I get an error about overlapping. This has to be possible, I'm just
>> going about it wrong. I have scoured the web and I can see how it
>> can be done in
>> a Linux environment with IP Tables, but I have not found a reference
>> to do this in a CISCO PIX.
>
> No, you cannot do that. While logically it would work inbound it would
> break going out. How would the smtp packet know which port to pat to
> on the way out. This is the same reason why you cannot have multiple
> publics nat'd to a single private.
>
I was worried about that. So, this is really something I can't do. I
need to find another way to have our e-mail server listen on two
different ports and then forward both those ports from the PIX. Thanks,
I have been beating my head at this for a while and was thinking that
maybe it can't be done.
|