Fortinet Firewall Gateway Address

Forum|Forum|10 years ago
June 21, 2016
3 replies
4140 views

I have the Fortinet 60D firewall set up with NAT. My mail server, however, is seeing every user get reported as coming from the gateway IP address, instead of the IP address they are actually coming from.

Why? Is there some setting I might have wrong here? It seems the inbound IPs should be reported correctly.

Suggestions appreciated as this is causing serious issues with my mail server.

Brian

rwpatterson

New Member

The policy that points the traffic inward to your email server should have NAT turned off.

BthAuthor

New Member

That worked for the inbound IPs, thanks.

Now I notice that the servers that have a local IP, and are sending mail to another server that has a local IP, are showing the gateway IP address reported in the logs. I would think they would report their own local IP address, not the IP of the gateway. Or they would report their public IP. Having the gateway IP reported is problematic.

Is there a similar tweak I can make for this?

Thanks, Brian

rwpatterson

New Member

If you are accessing those other servers by public DNS name, then the traffic is exiting the FGT via the NAT policy and coming back in, hence the gateway address. The only way around it is to have your inside servers use a different DNS zone, pointing the public names to the private IP addresses.

Sign up

Login with SSO

Login to the community

Login with SSO