Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

postfix server nat rule on panos -9.-0.4

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

postfix server nat rule on panos -9.-0.4

L2 Linker

Hello ,

I cant update panos ,

i want simple bi-direction nat configuration

i have rocky9 as a web,mail,dns server on kvm

what is best nat rule sequence to work mail server correctly

(after change nat rule sequence i am getting varity of erros 🙂 )

i am newly configeing nat and postfix that make me more diffecult to understand where is problem (postfix configration or firewall issuse )

using submission /port 587,pop 995

Thanks

2 REPLIES 2

L4 Transporter

Hi @shrikant 

First, the panos version 9.0.X is obsolete 

For NAT rules, you will use a Source NAT like a static nat with bi-directional rules

Or if you are publish a service, you will use a Destination NAT and could be works

You need to validate the flow of your communications

PCSPI, PCNSCx3,PCNSEx4,, PCSAE,PCDRA, ISC2 CC

Hello ,

Thanks ,i have already create sorurce not and destination nat but i dont know what i am doing wrong some how its not working it will be greate if you or some one post bi-direction nat rule image ,so i can replicate here

about flow of nat rule ,what is best practice /best way to understarnd and validate nat rule sequence  ,

which should be top and inline

https://live.paloaltonetworks.com/t5/general-topics/mail-and-dns-server/td-p/597705?attachment-id=14...

 

 

  • 292 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!