Here's my setup where IMail is actually configured to listen on port
587 and I have MS SMTP + ORF listening on port 25 (this is my address
validating gateway solution for my spam and virus blocking service).
You may want to set up IMail on port 25 and redirect differently. I'm
not absolutely positive how to modify it to work that way, but this is
at least a start. 192.192.192.192 is the sample IP that IMail listens
on in this example:
ip nat inside source static tcp 192.192.192.192 25 192.192.192.192 25
extendable no-alias
ip nat inside source static tcp 192.192.192.192 587 192.192.192.192 25
extendable no-alias
ip nat inside source static tcp 192.192.192.192 587 192.192.192.192 587
extendable no-alias
Matt
Don Brown wrote:
How is it typically done in the Cisco IOS - for a certain public ip for port
587 to be redirected to the same certain ip but port 25?
Thanks,
Sunday, January 23, 2005, 12:38:04 PM, Matt <[EMAIL PROTECTED]> wrote:
M> Unless you have a reason why you would want to use another piece of
M> software for validating addresses (very necessary these days), you are
M> probably going to want something that is software and does port
M> forwarding, but not another MTA of some sort. I don't know of any port
M> forwarding software that isn't some form of a firewall or proxy. Maybe
M> someone else knows better about what is available.
M> I believe that you could get away with a really cheap standard Linksys
M> router if you weren't looking to spend a lot of cash, the config would
M> be somewhat of a kludge to have work properly, but I'm pretty sure it
M> can be done.. Lots of routers do port forwarding, so you don't
M> necessarily need a Cisco to pull this off if you wanted a more
M> straightforward solution. IMO, every Internet server should be behind a
M> port blocking router, otherwise you may very well end up hacked through
M> some open port exploit, so a router has many advantages besides this one
M> thing.
M> Matt
M> Gary Brumm wrote:
SBC just blocked port 25 for their dynamically assigned DSL users. I
can have those users switch to SBC's SMTP servers but I have
been meaning to open up port 587 for my users that travel. I was
wondering what software solutions you guys have been using (like the
ones suggested below) and if there are any problems associated with
doing it via software on the IMail machine as opposed to doing it with
a hardware firewall. If it is a software solution it must run as a
service.
Thanks,
Gary
At 09:38 AM 8/27/2004, you wrote:
[EMAIL PROTECTED] wrote:
Jim,
If your firewall supports it, I'd suggest port remapping on the
firewall.
Have any port translated to IMail on port 25.
You could achieve the same solution using a port redirector software
on your IMail box.
There is a bunch of Port Forwarder/Redirector Softwares available, e.g.
PortTunnel by http://www.steelbytes.com/
or
Fpipe by
http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/freetools.htm
I gave FPipe a shot, and while it does work, IMail sees the
redirected traffic as coming from itself, which will defeat my
relaying setting. While that may not be a problem at the moment, some
time in that not-so-distant future, some spammer may become clever
enough to start relaying traffic through port 587, and I will become
an open relay.
Is there a redirector that does preserve the source IP, or is that
even possible?
--
A. Clausen
[EMAIL PROTECTED]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
ComsecNet
Dedicated Data Services
Stockton, CA
Phone:(209) 463-2809
Fax: (209) 938-0481
Email: [EMAIL PROTECTED]
Web: www.comsec.net
This message is intended for the use of the individual or entity to
which it is addressed and may contain information that is privileged,
confidential, and exempt from disclosure under applicable law. If the
reader of this message is not the intended recipient or an employee or
agent responsible for delivering to the intended recipient, you are
hereby notified that any dissemination, distribution or copying of
this communication is strictly prohibited. If you have received this
communication in error please destroy this message and notify the
sender by reply email.
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
M> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
M> List Archive:
M> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
M> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
----
Don Brown - Dallas, Texas USA Internet Concepts, Inc.
[EMAIL PROTECTED] http://www.inetconcepts.net
(972) 788-2364 Fax: (972) 788-5049
----
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
|
