nat question

[jimburris]

I have a mail server on the inside of the PIX that I want translated to a certain outside IP address. The outside IP address that I want to use is currently being used by the email filter server. Is there a way for both servers to use the outside IP while the remaining network gets natted to another pool of addresses?

 

[308win]

yes two servers can coexist with the same outside address so long as they will not be receiving traffic on the same port from your outside interface. They call it Static PAT. Since you have a mailfilter server I'm assuming that the mail server passes outbound traffic only.

http://www.cisco.com/en/US/customer...erence_chapter09186a00801cd841.html#wp1026694

static (dmz,outside) tcp certain.address smtp mail.filter.dmz.address smtp netmask 255.255.255.255

static (dmz,outside) tcp certain.address

http://www mail.server.dmz.address

http://www netmask

255.255.255.255

This allows

http://www access

to the mail server, if you do not want it then don't allow in the acl (or dummy it up with another port)