Redirect Blackberry mail to different mail server

I used to have this working. Somehow my Mikrotik configuration got screwed up.

I have a NAT rule for port 25 to go to a spam filter server. This spam filter (SpamLion) gets confused with Blacberry wireless spoofed reply addresses. I had an address list for all Blackberry servers so when ever traffic from these servers came on port 25 instead of going through the spam server it went directly to the email server. For the life of me, I can’t figure out how to get it working again. I thought it was a filter rule. I tested my rule but it only works with dropping traffic, it doesn’t redirect to the mail server.

Can anyone help?

Greatly appreciated.


Outside address 69.108.240.228
Inside spam server 192.168.150.40
Inside mail server 192.168.150.20

Blackberry addresses:

206.51.26.0-206.51.26.255
216.16.231.0-216.16.231.31
216.9.240.0-216.9.255.255
206.53.144.0-206.53.159.255
67.223.64.0-67.223.95.255
204.92.70.0-204.92.70.255
208.65.72.0-208.65.79.255
208.93.72.0-208.93.79.255
70.25.224.160-70.25.224.175
70.25.224.40-70.25.224.47
67.69.150.144-67.69.150.159
204.50.157.112-204.50.157.127
70.25.224.200-70.25.224.207

204.187.87.60
204.187.87.61
204.187.87.62
204.187.87.63

193.109.81.0/24
204.187.87.0/24
206.51.26.0/24
206.53.144.0/24
216.9.204.0/24

What is your /ip firewall nat export?

/ ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade comment=“WAN Interface” disabled=no
add chain=dstnat dst-address=69.120.227.167 protocol=tcp dst-port=110 action=dst-nat to-addresses=192.168.150.20
to-ports=0-65535 comment=“pop.edmonds.com” disabled=no
add chain=dstnat dst-address=69.120.227.167 protocol=tcp dst-port=25 action=dst-nat to-addresses=192.168.150.20
to-ports=0-65535 comment=“pop.edmonds.com” disabled=no
add chain=dstnat dst-address=69.120.227.165 protocol=tcp dst-port=80 action=dst-nat to-addresses=192.168.150.10
to-ports=0-65535 comment=“spamlion” disabled=no
add chain=dstnat dst-address=69.120.227.172 protocol=tcp dst-port=80 action=dst-nat to-addresses=192.168.150.10
to-ports=0-65535 comment=“Spamlion” disabled=no
add chain=dstnat dst-address=69.120.227.172 protocol=tcp dst-port=25 action=dst-nat to-addresses=192.168.150.40
to-ports=0-65535 comment=“smtp.dva.com” disabled=no


pop.edmonds.com (192.168.150.20) is that actual mail server where blackberry traffic (port 25) needs to go to

69.120.227.167 —> 192.168.150.20 port 25