I have an MT x86 box with 3 NICS
1- WAN is connected to DSL (fixed public IP)
2- (10.0.8.1) - has a WLAN hotspot on it which runs just fine
3- (192.168.254.200) - is connected to a Small Business Server (IP 192.168.254.1) with an admin network running from it.
I’m trying to deliver mail to the Exchange Server (SMTP server) on the SBS box from the net.
I have added a dstnat rule for port 25 from WAN to 192.168.254.1.
I thought that would do it, but testing for the SMTP server on the public fixed IP fails.
Any advice welcome.
Martin
You also need to add a forward rule for the mail server in /ip firewall filter
/ip firewall filter add action=accept chain=forward comment="" disabled=no dst-address=192.168.254.1
place this rule before any deny rule
skillful - thanks for your reply.
Unfortunately it didn’t do the trick and the server still doesn’t respond
Any other ideas?
Martin
post the output of
/ip firewall filter print
[admin@CyberiaNET] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward action=accept dst-address=192.168.254.1
1 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
[admin@CyberiaNET] >
[admin@CyberiaNET] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
1 ;;; masquerade WLAN1 hotspot network
chain=srcnat action=masquerade src-address=10.0.8.0/24
2 ;;; masquerade LAN hotspot network
chain=srcnat action=masquerade src-address=192.168.254.0/24
3 ;;; NAT rule to allow external access to router on 10.0.8.111
chain=dstnat action=dst-nat to-addresses=10.0.8.111 to-ports=80 in-interface=WAN>>ADSL dst-port=82 protocol=tcp
4 ;;; This is incoming NAT rule to allow RDC on Server - added by MN
chain=dstnat action=dst-nat to-addresses=192.168.254.1 to-ports=3389 in-interface=WAN>>ADSL dst-port=3389
protocol=tcp
5 ;;; This is the incoming NAT rule to allow Winbox into CyberiaNet router - added by MN
chain=dstnat action=dst-nat to-addresses=192.168.254.200 to-ports=8291 in-interface=WAN>>ADSL dst-port=8291
protocol=tcp
6 ;;; This was in the June set up - added by MN 14.30 231007
chain=srcnat action=masquerade out-interface=WAN>>ADSL
7 ;;; This is incoming NAT rule to allow SMTP on Home Server - added by MN
chain=dstnat action=dst-nat to-addresses=192.168.254.1 to-ports=25 in-interface=WAN>>ADSL dst-port=25 protocol=tcp
8 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=10.0.8.0/24
9 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=10.0.8.0/24
[admin@CyberiaNET] /ip firewall nat>
Your rules seem okay. Is the counter on the SMTP NAT rule incrementing?
Yes - the packets and bytes increase each time I try to contact the Exchange Server
Add another dst-nat rule using source port.
/ip firewall nat add chain=dstnat action=dst-nat to-addresses=192.168.254.1 to-ports=0-65535 in-interface=WAN>>ADSL src-port=25 protocol=tcp disabled=no
Thanks - I’m beginning to think something isn’t working properly on the Exchange Server because after your last rule, the remote web access and rdc work fine again.
It may be something to do with changing the IP on the server to sit it behind the MT router.