Chris Low wrote:
Okay, today I'm trying to get our Exchange 2000 mailserver online behind the firewall.

Currently mail is set to go straight from our ISP's router to 192.168.1.2 (the ip address of our exchange server)

I'm trying to do a minimal amount of work to get the firewall in between the ISP's router and the exchange server so I configured the firewall's external interface (eth0) to be 192.168.1.2 and the internal interface to 10.10.10.254. The exchange server is now 10.10.10.2

In trying to setup port forwarding for smtp services I put the following in my network.conf file:

# TCP services open to outside world
# Space seperated list: srcip/mask_dstport
#EXTERN_TCP_PORTS="216.171.153.128/25_ssh 0/0_www 0/0_1023"
EXTERN_TCP_PORTS="192.168.1.1/24_25"
Use:
EXTERN_TCP_PORTS="192.168.1.2_25"

although the entry you have shouldn't be causing problems.

and

# Uncomment following for port-forwarded internal services.
# The following is an example of what should be put here.
# Tuples are as follows:
# <protocol>_<local-ip>_<local-port>_<remote-ip>_<remote-port>
#INTERN_SERVERS="tcp_${EXTERN_IP}_ftp_192.168.1.1_ftp tcp_${EXTERN_IP}_smtp_192.168.1.1_smtp"
INTERN_SERVERS="tcp_$192.168.1.2_smtp_10.10.10.200_smtp"
Um...didn't you just indicate your internal exchange box is 10.10.10.2, *NOT* 10.10.10.200?!? Probably a big part of your problem!

--
Charles Steinkuehler
[EMAIL PROTECTED]




-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to