Routing Issue

[Lordmathos]

Hi All I am having a routing issue. I am trying to get external email to reach the exchange server

I have a watchguard x1000 as the main firewall and that connects to a multi honed ISA 2004 server.

The Watchguard has a trusted IP of 192.168.1.200 and the ISA has an external IP of 192.168.1.1 and Internal IP of 10.1.0.1.

I have got all rules working so far but cannot get external mail to reach the exchange server (IP 10.1.0.15).

I have tried setting up a nat rule on the watchguard to forward all incoming mail on port 25 to 10.1.0.15 and a web listner on the isa server to forward all mail on port 25 to 10.1.0.15 but it does not seem to be working.

What would be the best rule(s) to set up on the Watchguard and ISA server. Can anyone tell me where I am going wrong.

 

[unclerico]

I'll be honest, I've never used ISA before because, well, it's a software firewall and Microsoft Security is kind of an oxymoron. Anyway, have you tried altering your incoming SMTP rule to NAT to the 192.168.1.1 address on the ISA box??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[sixteamparlay]

Your firebox doesn't know how to forward to the 10.1.0.x network

create a static route on the firebox to the 10.1.0.x network using ip 192.168.1.1