NAT issue

Forum|Forum|8 years ago
March 2, 2018
6 replies
9997 views

hi,

I think this will be easy for some of you to tell me where the setting is to solve my problem:

i have to install an anonymous relay receive connector on our exchange for several external IPs - now the problem is, that on the exchange the originating IP where the connect seems to come from is the lan IP of our fortigate, not the external IP of the guy who tries to connect to our exchange... and so the relay doesnt work.. where can change the setting that the real originating IP comes to our server and not the one the fortigate has?

thank you & regards

michael_lacey

New Member

I'd look on the firewall policy that allows it access through the firewall, there is an option to turn NAT on or off

chiefexecutiveAuthor

New Member

the policy rule in which the VIP for the portforwarding is has NAT turned OFF

it doesnt matter if i turn it on or off, the issue is the same...

i tried your tipp at a customer of mine ant there it works like you told, but not on our local forti..

ede_pfau

SuperUser

1- reboot your FGT

2- use

diag deb ena

diag deb flow filter port 25

diag deb cons ena

diag deb func ena

diag deb flow trace start 20

and post the results.

gdifiore

New Member

On your WAN to LAN policy that you created to allow the SMTP traffic inbound (the one with the VIP for your exchange server in it), do you have NAT enabled? If so, you should turn it off.

Sign up

Login with SSO

Login to the community

Login with SSO