NAT Configuration: Need information

[paloalto.nis]

Hello everyone,

I need confirmation on configuration.
I attach a picture to this discussion.

Can you confirm that the 2 first menstrual sufficient for the proper functioning of an email server in the DMZ (not to mention filtering rules)?

Also, the first two rules can replace the last?

Thank you in advance for your help.

[UhMayYeah]

first two rules can replace the last

[Gregoux]

You could keep only the last one, bidirectionnal allow you to minimize the number of NAT rule

it's better

[paloalto.nis]

Thank you for your return.

One last question, if I understand the "dynamic IP" option, if I put in 'Source Address' multiple servers, so must I translating many public IPs ?

Can you confirm this?
Thank you all.

[UhMayYeah]

dynamic-ip : Pool Based Source NAT.

1Private:1Pool IP

If Pool is exhausted ,no more outbound connections.

Dynamic IP +Port :Source NAT with Port-Translation

Multiple Private  Source--->Single Public IP + dynamic Port

HTH

[Gregoux]

static translation is used to translate 1 ip to another one

the dynamic translation is a same but base on a range of ip or a subnet to be translated base on a pool of ip

but in this case if the pool is exhausted then you can switch to an alternate methode like dinamic ip and port translation.

dinamic port translation allow you to translate with only one ip and modified the source port for the tranlation.

[paloalto.nis]

Thank you for your help, it is very clear!