Is it possible to change the IP address the FortiGate presents for its AntiSpam proxy?

Disable NAT on the firewall policy which contains the VIP for the SMTP server.

Hi,

Try to config in the rule that your smtp use a dynamic  ip pool nat entry, like this:

config firewall policy
    edit <RULE ID>
        set uuid <YOUR RULE UUID>
        set srcintf "internal"
        set dstintf "wan1"
        set srcaddr "<YOUR SOURCE ADDR>"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "<YOUR SERVICES>"
        set nat enable
        set ippool enable
        set poolname "<YOUR IP POOL>"
    next

Remember, your ip pool have to be your public IP.

Try this and let me know about it.

Sorry about language mistakes,

Carlos - Brazil

neonbit wrote:

Hi guys,

 

Does anyone know if there's a way to disable/change the IP address that gets presented by the FortiGates AntiSpam proxy? 

 

For some reason it keeps on showing the internal IP address of the FortiGate. Ideally I'm trying to change it to the external VIP that the MX records would be pointing to (or at a minimum the WAN IP address of the FGT interface).

 

220 mail.domain.com ESMTP Smtpd; Wed, 3 Dec 2014 00:00:00 +0000
EHLO test.com
250-mail.domain.com Hello [192.168.1.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 10485760
250-DSN
250-AUTH LOGIN PLAIN
250-DELIVERBY
250 HELP

Thanks guys, that did the trick! Didn't realise the NAT would affect the SMTP address it presented (always assumed it was the interface the SMTP connection was accepted on).

Disabled NAT and it's looking good now!