postfix server nat rule on panos -9.-0.4

[shrikant]

Hello ,

I cant update panos ,

i want simple bi-direction nat configuration

i have rocky9 as a web,mail,dns server on kvm

what is best nat rule sequence to work mail server correctly

(after change nat rule sequence i am getting varity of erros 🙂 )

i am newly configeing nat and postfix that make me more diffecult to understand where is problem (postfix configration or firewall issuse )

using submission /port 587,pop 995

Thanks

[Alejandro_Hernandez]

Hi @shrikant 

First, the panos version 9.0.X is obsolete 

For NAT rules, you will use a Source NAT like a static nat with bi-directional rules

Or if you are publish a service, you will use a Destination NAT and could be works

You need to validate the flow of your communications

[shrikant]

Hello ,

Thanks ,i have already create sorurce not and destination nat but i dont know what i am doing wrong some how its not working it will be greate if you or some one post bi-direction nat rule image ,so i can replicate here

about flow of nat rule ,what is best practice /best way to understarnd and validate nat rule sequence  ,

which should be top and inline

https://live.paloaltonetworks.com/t5/general-topics/mail-and-dns-server/td-p/597705?attachment-id=14...