Re: [pfSense Support] Redirecting Traffic Destined for outbound NAT

2009-02-09 Thread Tim Nelson
You'll need to setup a NAT Port Forward rule that looks like this: If Proto Ext Port Range NAT IP Int. Port Range Description LAN TCP 25 (SMTP) mailserver IP mailserver PORT Redirect SMTP traffic to mail server The problem is this. Your mail server *also* resides on the LAN interface. After

Re: [pfSense Support] Redirecting Traffic Destined for outbound NAT

2009-02-09 Thread Bill Marquette
On Mon, Feb 9, 2009 at 3:14 PM, Joel Robison robisonj...@gmail.com wrote: Hello All, I was wondering if anyone here would be able to give me some pointers in context of traffic redirection. What I am attempting (and failing at I should add) to do is redirect all SMTP traffic from the LAN to

Re: [pfSense Support] Redirecting Traffic Destined for outbound NAT

2009-02-09 Thread Chris Buechler
On Mon, Feb 9, 2009 at 5:43 PM, Tim Nelson tnel...@rockbochs.com wrote: - Bill Marquette bill.marque...@gmail.com wrote: The MTA needs to not be on the same network as you are redirecting. ie. You can't send LAN traffic back to LAN, it MUST go to a different interface (say a DMZ).

Re: [pfSense Support] Redirecting Traffic Destined for outbound NAT

2009-02-09 Thread Joel Robison
I have done a little experimenting with this over the past few hours (while dodging IT requests, I am sure most of you are familiar). I setup a VLAN interface that is off of the LAN interface to put the email server in a DMZ. I then created a rule that will look for my workstation as a source IP

Re: [pfSense Support] Redirecting Traffic Destined for outbound NAT

2009-02-09 Thread Bill Marquette
On Mon, Feb 9, 2009 at 5:11 PM, Chris Buechler c...@pfsense.org wrote: On Mon, Feb 9, 2009 at 5:43 PM, Tim Nelson tnel...@rockbochs.com wrote: - Bill Marquette bill.marque...@gmail.com wrote: The MTA needs to not be on the same network as you are redirecting. ie. You can't send LAN

Re: [pfSense Support] Redirecting Traffic Destined for outbound NAT

2009-02-09 Thread Bill Marquette
On Mon, Feb 9, 2009 at 5:30 PM, Joel Robison robisonj...@gmail.com wrote: I have done a little experimenting with this over the past few hours (while dodging IT requests, I am sure most of you are familiar). I setup a VLAN interface that is off of the LAN interface to put the email server in a