Technical Tip: How to NAT an internal mail server to the Internet

[Anonymous]

Description	This article describes setting up an IP Pool on the FortiGate for a mail server when NAT is configured.
Scope	All OS.
Solution	First, create an address entry for the email server. To create an address: Go to Firewall -> Address. Select Create New. Add the IP for the email server with a netmask of 255.255.255.255. Select OK. Next, create an IP Pool with the email server address. To create an IP Pool: Go to Policy & Objects -> IP Pool. Select Create New. Enter a name for the IP Pool. Enter the IP address range. In this case, it will be a single address of the email server. Do not include the netmask. Select OK. Create a firewall policy for this NAT translation. To create a firewall policy: Go to Firewall -> Policy. Select Create New and complete the following: Source Internal Address Name The address created for the mail server. Destination All Address Name All Schedule Always Service SMTP Action Accept Select the NAT Checkbox and select Dynamic IP Pool. Select the IP Pool that was created from the drop-down list. Select OK. Note: The new rule should be placed before the Internal to External. Allow Any Rule for normal traffic to ensure that the FortiGate unit translates the email traffic before the normal Internet traffic.