topic postfix server nat rule on panos -9.-0.4 in Next-Generation Firewall Discussions

postfix server nat rule on panos -9.-0.4

shrikant — Mon, 30 Sep 2024 15:54:04 GMT

Hello ,

I cant update panos ,

i want simple bi-direction nat configuration

i have rocky9 as a web,mail,dns server on kvm

what is best nat rule sequence to work mail server correctly

(after change nat rule sequence i am getting varity of erros 🙂 )

i am newly configeing nat and postfix that make me more diffecult to understand where is problem (postfix configration or firewall issuse )

using submission /port 587,pop 995

Thanks

Re: postfix server nat rule on panos -9.-0.4

Alejandro_Hernandez — Mon, 30 Sep 2024 18:43:48 GMT

Hi @shrikant

First, the panos version 9.0.X is obsolete

For NAT rules, you will use a Source NAT like a static nat with bi-directional rules

Or if you are publish a service, you will use a Destination NAT and could be works

You need to validate the flow of your communications

Re: postfix server nat rule on panos -9.-0.4

shrikant — Tue, 01 Oct 2024 01:56:35 GMT

Hello ,

Thanks ,i have already create sorurce not and destination nat but i dont know what i am doing wrong some how its not working it will be greate if you or some one post bi-direction nat rule image ,so i can replicate here

about flow of nat rule ,what is best practice /best way to understarnd and validate nat rule sequence ,

which should be top and inline

https://live.paloaltonetworks.com/t5/general-topics/mail-and-dns-server/td-p/597705?attachment-id=14354