Skip to main content
goroth
goroth
New Member
August 3, 2016
Question

Outbound port redirect

  • August 3, 2016
  • 2 replies
  • 6571 views

There is an email server located outside our network that was running port 25 but is now running port 1234 instead. (example not real port).

We need to edit all email clients to the new port 1234.

Can the forti IOS redirect outbound port 25 dest address 1.2.3.4 to new port 1234 address 1.2.3.4?

 

    2 replies

    MikePruett
    MikePruett
    New Member
    August 4, 2016

    Hmm, I don't personally think so but I may be wrong. I have never heard of anyone doing something in that manner. I know PAT occurs but it isn't as cut and dry as you are saying.

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    August 4, 2016

    Yes, you can do that definitely.

    What you need is destination NAT with port forwarding, and the object doing this is a VIP (virtual IP). Define it on the 'internal' port. In order to activate the NAT, create a policy from 'internal' to 'wan' with destination address == VIP.

     

    You can always check what is happening with 'diag debug flow'. NAT should be evident in the diag output.

    MikePruett
    MikePruett
    New Member
    August 4, 2016

    Ede you rock! Learned something new today. Never thought of using the VIP to do it.

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    August 5, 2016

    Glad I could help.

    I had once combined VIPs with short names on the internal DNS zone, to make my life easier in connecting to customer firewalls.

    Terms & ConditionsAccessibility statement