We have a Lotus Notes for our Mail and are introducing a new mail security appliance to which check all incommimg and e-mail before delivery to the Notes Server.
We found the a static route in the Pix Firewall configuration from our external IP to the Notes Server. We changed the static route to reflect the IP of the Security appliance instead of the Notes Server (by removing it then adding the new route. I believe the syntax was:
static tcp (inside, outside) "ext ip" "iP of security applinace"
Incomming mail worked fine, but the Notes server stopped sending (everything was held in queue). Not sure if it was beacuse re removed the static route to the Notes Server and now it had a problem sending or if it just needed to be re-booted. Our users also log on to the Notes Server from the "outside" to view mail, and we want to keep this ability, so I imagine that when we changed that route from the IP of the Notes Serrver to the IP of the security appliance, they would not have been able to access the Notes server. Can we specify two static routes from the external IP in ? One to the Notes Server and one to the Security appliance ? and how do we specify that the mail go to the security appliance, but still give access to the Notes Server from the outside?
Any help GREATLY appreciated ! thanks,
Chris
We found the a static route in the Pix Firewall configuration from our external IP to the Notes Server. We changed the static route to reflect the IP of the Security appliance instead of the Notes Server (by removing it then adding the new route. I believe the syntax was:
static tcp (inside, outside) "ext ip" "iP of security applinace"
Incomming mail worked fine, but the Notes server stopped sending (everything was held in queue). Not sure if it was beacuse re removed the static route to the Notes Server and now it had a problem sending or if it just needed to be re-booted. Our users also log on to the Notes Server from the "outside" to view mail, and we want to keep this ability, so I imagine that when we changed that route from the IP of the Notes Serrver to the IP of the security appliance, they would not have been able to access the Notes server. Can we specify two static routes from the external IP in ? One to the Notes Server and one to the Security appliance ? and how do we specify that the mail go to the security appliance, but still give access to the Notes Server from the outside?
Any help GREATLY appreciated ! thanks,
Chris