Our ISP has allocated to us 111.111.111.65/28 static
address space.
We're use's follow schema:
111.111.111.65 - ISP router
172.16.1.253/24 - LAN
111.111.111.67/28 - WAN
192.168.3.253/24 - DMZ
192.168.4.253/24 - LAN2
192.168.3.4 - our mail server placed in DMZ
What's we sets:
Firewall: NAT: Server NAT:
111.111.111.72
Firewall: NAT Inbound:
If -> WAN, Proto -> TCP, Ext. port range -> 25 (SMTP),
NAT IP -> 192.168.3.4 (ext.: 111.111.111.72),
Int. port range -> 25 (SMTP)
Services: Proxy ARP:
Interface -> WAN, Network -> 111.111.111.72
Firewall: Rules: WAN:
pass Proto -> TCP, Source -> any, Port -> any,
Destination -> 192.168.3.4, Port -> 25 (SMTP)
Firewall: Rules: LAN:
pass Proto -> any, Source -> LAN net, Port -> any,
Destination -> any, Port -> any
Firewall: Rules: DMZ:
pass Proto -> any, Source -> any, Port -> any,
Destination -> any, Port -> any
$ telnet 111.111.111.72 25
Trying 111.111.111.72...
telnet: connect to address 111.111.111.72: Connection
refused
Diagnostics: Logs: Firewall:
Act: accept, Time: 16:39:00.692952, If: WAN,
Source: 85.21.108.189, port 2305,
Destination: 192.168.3.4, port 25, Proto: TCP
$ netstat -nr
Routing tables
Internet:
Destination Gateway Flags Refs
Use Netif Expire
default 111.111.111.65 UGSc 3
0 sk0
127.0.0.1 127.0.0.1 UH 0
0 lo0
172.16.1/24 link#1 UC 0
0 rl0
192.168.3 link#3 UC 2
0 fxp0
192.168.3.4 xx:xx:xx:xx:xx:xx UHLW 0
6 fxp0 1004
192.168.3.253 xx:xx:xx:xx:xx:xx UHLW 0
0 lo0
111.111.111.64/28 link#2 UC 1
0 sk0
111.111.111.65 xx:xx:xx:xx:xx:xx UHLW 4
0 sk0 938
$ ifconfig
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST>
mtu 1500
options=40<POLLING>
inet 172.16.1.253 netmask 0xffffff00 broadcast
172.16.1.255
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
sk0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST>
mtu 1500
inet 111.111.111.67 netmask 0xfffffff0 broadcast
111.111.111.79
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (100baseTX
<full-duplex,flag0,flag1>)
status: active
fxp0:
flags=9843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,MULTICAST>
mtu 1500
options=40<POLLING>
inet 192.168.3.253 netmask 0xffffff00 broadcast
192.168.3.255
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
sk1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (1000baseTX <half-duplex>)
status: no carrier
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
Can some one help please, what's wrong?
Thanks.
Alexander,
---
Professional hosting for everyone - http://www.host.ru | 