No, the Global line is for NAT, the config you had previously would be correct but you
would exclude the IP you set a static mapping from from the Global config. If you use
a Global IP for a static mapping the config gets more complicated because within the
Global command you would provide the ports.
global (outside) 1 192.10.10.197-192.10.10.198
static (inside,outside) 192.10.10.196 10.16.0.2
access-list smtp_in permit tcp any host 192.10.10.196 eq smtp
access-group smtp_in in interface outside
no fixup protocol smtp 25
You would probably be better off using Conduits to do the port forwarding
instead of the ACL's.
-----Original Message-----
From: Chris Bodnar [mailto:[EMAIL PROTECTED]]
Sent: Tue 7/23/2002 12:37 PM
To: MS-Exchange Admin Issues
Cc:
Subject: RE: Exchange behind PIX config
Thanks for the reply. The Global command is where I am getting
confused.
It was my understanding that I need it, and it couldn't be the IP
address
of the Outside interface. Is that correct? If it can be would this
work:
global (outside) 1 192.10.10.195
static (inside,outside) 192.10.10.195 10.16.0.2
access-list smtp_in permit tcp any host 192.10.10.195 eq smtp
access-group smtp_in in interface outside
no fixup protocol smtp 25
Thanks
chris
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
.+-
ڝ@Aa 0z[lpjoZ\zm
