topic Re: mail and dns server in General Topics

mail and dns server

shrikant — Thu, 12 Sep 2024 18:00:49 GMT

Hello friends ,

I am runnng pv-vm on kvm , which has no license presently ,(version 9.0.4)

baiscally this setup is understand palo alto firewall

i have domain /fqdn (want to run all a mx ns server to run locally )

i have setup a web ,mail and ftp and dns server ,web server and ftp server working but need some help/understanting on mail and dns server ,

do i need nat rule or proxy ?

i have configure nat rule but there is problem with over shadows rules which is confusing me

how to setup a u-turn nat when intenal dns server is setup ?

if 9.0.4 does not support submission then which mail it support and how to config it

any reseller pls send me pm/dm

Thanks

Re: mail and dns server

OtakarKlier — Fri, 13 Sep 2024 20:19:54 GMT

Hello,

It all depends on where the traffic is being sourced from and where the servers are located in the network. If you could give us a bit more guidance, we can help you out.

U-Turn rules are used if I want internal clients to connect to the public facing IP of a system. May not be required but it does depend on your environment.

Regards,

Re: mail and dns server

shrikant — Thu, 19 Sep 2024 02:22:08 GMT

what should be nat rule sequence if i am running web ,mail ,dns and ftp server from 1 server only ?

using panos 9.0.4

as some nat rule are shadowdown

i am planing to use all possible dns setting localy

which is best method ,while just start using /exploring functionality of panos

Re: mail and dns server

OtakarKlier — Thu, 19 Sep 2024 15:58:46 GMT

Hello,

Just like security policies, the firewall reads the rules top-down. So the ones at the top once hit, the rest get disregarded. I would move your more specific NAT policies higher in the list and your more general one to the bottom.

Re: mail and dns server

shrikant — Thu, 19 Sep 2024 16:42:08 GMT

can you please tell me from image i post ,what is wrong ?

if i use internal dns server and dns proxy from palo alto ,does nat rule still shadow down ,(some nat rule doesnt hit )

Re: mail and dns server

OtakarKlier — Thu, 19 Sep 2024 16:45:35 GMT

Hello,

Move rule 1 to the bottom of the list.

See if that helps.

Regards,