topic Re: Outbound email traffic is using the public IP assigned to FW external interface in General Topics

Outbound email traffic is using the public IP assigned to FW external interface

rmarquez — Thu, 21 Jul 2011 10:24:16 GMT

Hi,

New user of PA Firewall here. I noticed that when we send out emails, the recipient is seeing that the email comes from the public IP which is assigned to the external interface of our PA firewall. Before moving to PA, we can see the public IP NATed to our email server. Is there any configuration we missed? Or is this how it should be?

Appreciate your help. Thanks!

Re: Outbound email traffic is using the public IP assigned to FW external interface

DavePalo — Thu, 21 Jul 2011 12:45:32 GMT

Hi, were you using Check Point automatic NAT previously?

I've seen a couple of similar issues before - these were resolved by inserting an additional NAT rule just before the NAT rule that is catching your outbound SMTP traffic at the moment. The new NAT rule can then translate just your outbound email server traffic to have the the required source address.

Regards,

Dave

Re: Outbound email traffic is using the public IP assigned to FW external interface

rmarquez — Fri, 22 Jul 2011 02:32:05 GMT

Hi Dave,

Thanks for your reply.

Previously we were using Watchguard. I am a bit confused with your recommendation (insert a NAT rule before the Mail Server NAT). What would be the rule's content? Sorry for the bummer question...

Re: Outbound email traffic is using the public IP assigned to FW external interface

lardsa — Fri, 22 Jul 2011 08:15:52 GMT

Hello,

Source IP: YourMailServer

DestinationIP: Any

Source Translation

IP Type: ip-static

Translated address : PublicIPAddressYouWant

Bidirectional: yes

Destination translation: none