topic Nat Question: Is this doable? in Network Security

Nat Question: Is this doable?

mingram27 — Tue, 12 Mar 2019 01:27:30 GMT

Here is the scenarion:

- would like to route any internal traffic thats SMTP based only to internal email server ( x 2 )

- The default gateway is already set on the email server to go out the outside interface

Can this be done on an ASA, I am thinking this more of a routing issue that NAT statement.

NAT LAN_Traffic_port25 --> INT_MailServer_Only (I am thinking its not posssible or it even make sense).

What do you think?

Thank you very much guys for you answers in advance

Nat Question: Is this doable?

Julio Carvajal — Fri, 12 Apr 2013 17:40:50 GMT

Hello Matthew,

looks that what you are looking is some sort of PBR which is not supported,

give it another try and explain it a liitle more in detail and clear and let's see if we can do something okay?

Remember to rate all of the helpful posts

Julio

Nat Question: Is this doable?

mingram27 — Fri, 12 Apr 2013 21:14:42 GMT

Thanks Jay! I will try it again...

I have 3 email servers on my network, all 3 has hub roles and transport roles. One server with hub, transport and CAS role (sorry I know this is not a a Windows forum but I want people to get the picture).

- Affectively I want ONLY 2 of the 3 Exchange Servers to handle all SMTP traffic from internal and external clients (inside network and outsite network).

- routing inbound to port 25 is easy to do, but how would I tell all of my internal (LAN) to go to INT_IP of mail server?

- I dont think I can set a default GW specifically for SMTP traffic...can I?

Hope that helps

Thank you

Nat Question: Is this doable?

Julio Carvajal — Fri, 12 Apr 2013 21:19:50 GMT

Hello Matthew,

You could with PBR but in the ASA that is not supported,

On a router you could basicallyu match all TCP SMTP traffic and set it to go to a specific address DG.

You follow me?