Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Mail Security: SMTP, POP3, Antispam and Antivirus

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-30-2010, 09:42 PM
Junior Member
 
Join Date: Jan 2010
Posts: 4
Exclamation Change IP address SMTP proxy listens on

I have 5 public IP addresses. The default IP address's last octet is 209. My MX record is 213. I have an alternate address configured and verfied that other services are working to it (webmail, etc). However, when I try to test smtp traffic to 213, the SMTP proxy does not answer. It only answers on the default 209. How can I change the SMTP proxy to listen on 213?
Reply With Quote
  #2 (permalink)  
Old 01-30-2010, 09:53 PM
RFCat_vk's Avatar
Wizard
 
Join Date: Aug 2005
Location: Victoria, Australia
Posts: 2,554
Default

I can't answer you specifically, but it is a question that has been asked many times.

I would recommend you do a search for that topic and also have a look in the online manual that comes with your ASG.

Ian M
__________________
Home Power User unlimited licence - v7.50x - AMD X2 5050e with 2gb,1 intel NIC, the onboard NIC and netgear gs108t with vlans.
Reply With Quote
  #3 (permalink)  
Old 01-31-2010, 03:55 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,393
Default

As Barry suggested on another thread you posted, the Astaro works best when the primary address on your External interface is the IP in your MX record. Another mis-step newbies often make is to skip the step of giving the Astaro a "proper" hostname. Instead of naming it "My new Astaro" or some such, it's important to use an FQDN that's defined in your public authoritative name server.

If you can't change the primary address on the External interface to .213, then you'll need a NAT rule:
Traffic Source: Any
Traffic Service: SMTP
Traffic Destination: External [{your .213 Additional Address}] (Address)

NAT mode: DNAT (Destination)

Destination: External (Address)
Destination Service: {blank!}
Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #4 (permalink)  
Old 02-17-2010, 10:08 AM
Junior Member
 
Join Date: Feb 2010
Posts: 9
Default

Quote:
Originally Posted by BAlfson View Post
Another mis-step newbies often make is to skip the step of giving the Astaro a "proper" hostname. Instead of naming it "My new Astaro" or some such, it's important to use an FQDN that's defined in your public authoritative name server.

If you can't change the primary address on the External interface to .213, then you'll need a NAT rule:
Traffic Source: Any
Traffic Service: SMTP
Traffic Destination: External [{your .213 Additional Address}] (Address)

NAT mode: DNAT (Destination)

Destination: External (Address)
Destination Service: {blank!}
Cheers - Bob
That seems to be one of my problem. Is my NAT Configuration correct here ?




Also, I have setup my host name as myname.mine.nu

where mine.nu is host provided by "myDNS website" instead of using the ip address.
Reply With Quote
  #5 (permalink)  
Old 02-17-2010, 04:04 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,393
Default

I'm not sure that the DNAT trick works; the best thing to do is to assign the IP in your MX record as the primary IP on the External interface. It appears that you have done that.

Your DNAT is unnecessary, but it wouldn't work anyway as the idea of the trick is to rewrite the traffic header's original destination, an 'Additional Address' on the WAN interface, chaning it to the primary address on that same interface.

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 03:23 PM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.