Welcome to ISAserver.org

NAT/Proxy - ARP

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> NAT/Proxy - ARP

Page: [1]

Message

<< Older Topic Newer Topic >>

NAT/Proxy - ARP - 23.Sep.2006 3:11:13 PM

ddum

Posts: 6
Joined: 30.Jun.2005
Status: offline

Hello!

I am trying to achieve something which would be easy in the products i _know_ how to operate (Juniper and Shorewall for Linux), but i am not yet apt enough to realize it in ISA 2004

I have a ISA server with a few interfaces.

One interface to our ISP upstream router (Single public IP)
One interface to our public IP DMZ (a /27 subnet from our ISP, with the ISA-interface on .1)
One interface to our internal network (a /24 network, with the ISA-interface on .1)

I have no problem controlling traffic to/from the DMZ.

But what i now would like to do is to direct traffic that comes in on the .2 adress on the DMZ so that port 25 is mapped to 10.46.10.30 on the internal network.

Yes, i know the mail handler should be in the DMZ; but as we are migrating to our parent companiy groupware system in a matter of weeks, it is not an option to have a bastion mail handler right now.

So, how can i make ISA "answer" on a second adress on a interface, and NAT that traffic to an internal host?

Post #: 1

Featured Links*

RE: NAT/Proxy - ARP - 14.Oct.2006 11:48:43 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi D,

Bind the address to the external interface of the ISA Firewall that you want to accept the incoming connections and then create a Server Publishing Rule for SMTP.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ddum)