I don't know exactly what types of NAT firewalling there are, but I'll
assume you mean something like IPmasquerading with Port forwarding (25
forwarded to you internal machine).

You can't send packets to your external (real) IP and then have them
come back into the network.
For instance, my web server is inside my network.  If I try to access
www.youwasahero.com, it will time out.
On the otherhand,  my FTP server is on the firewall/gateway box, so if I
access ftp.youwasahero.com that works, because the packets don't have to
leave the network and then come back in.

Here are your options:
1)  Put your qmail server on the gateway/firewall machine (this is what
I do).

2) Set up a DNS server for your internal network.  Make an entry so that
mail.int.foobar.com resolves to your INTERNAL IP address for the mail
server. (this is how I handle my internal web server.  For the real
world DNS records, www.youwasahero.com resolves to my external (real) IP
address, and port 80 is forwarded. For my private internal DNS server,
www.youwasahero.com resolves to the IP address of the web server on the
internal network, 192.168.0.5.)

I hope that makes sense.


"Steve Peace(Internal)" wrote:

> First off, let me thank everyone in this mailing list for assiting me
> in setting up my qmail server.  Within about 4 weeks, I now have a
> functioning server that will send and receive email from the internet
> and internally.  A special koodoos to Dave Sill for writing LWQ.  Your
> Document was a huge amount of help.  I now have a server running on
> RedHat 6.1 with Qmail 1.03.  I seem to be having one problem.  My
> server sits behind a NAT firewall.  I have 2 NICs in my server, one
> with an internal non routeable adrress, and another with a real ip
> address that my new ISP has given to me.  I contacted my former/other
> provider that is hosting our website and also registered our domain,
> to get the MX records changed to point to my new mail server.  This
> has been done as far as I can tell.  when I do a nslookup on
> mail.foobar.com I get back the correct address.  Also I can receive
> email from the outside world.  My problem lies with attaching to
> mail.foobar.com.  When I am behind the firewall I can attach to
> mail.int.foobar.com and everything is working, but when I try to
> attach to mail.foobar.com, I time out.  Listed below is the output of
> qmail-showctl.  It all seems to be OK when I look at it, but I'm just
> a newbie.  Any help would be greatly appreciated.qmail home directory:
> /var/qmail.

Reply via email to