topic Re: Alter destination based on source address in Network Security

Alter destination based on source address

gesadmin1 — Mon, 11 Mar 2019 15:04:09 GMT

Ok so I've got an ASA 5510 with 8.0(4) installed. The situation I've got is I need to alter the destination of smtp traffic based on the source of the traffic. For example, any smtp traffic coming from 1.1.1.1 needs to be forwarded to 192.168.10.30, but any other smtp traffic needs to go to 192.168.10.31. I was thinking of Modular Policy Framework or a route-map, but I cannot find a suitable solution with these tools. Should I throw a router in front of the ASA and set the next hop from a route-map?? Thanks for your help.

Re: Alter destination based on source address

Jon Marshall — Thu, 12 Mar 2009 22:55:34 GMT

Can you give a bit more detail in terms of

1) source IP addresses the smtp traffic is coming from

2) destination address that the smtp traffic is going to

Jon

Re: Alter destination based on source address

gesadmin1 — Thu, 12 Mar 2009 23:05:38 GMT

jon, thanks for your response.

1) an example source address would be 1.1.1.1

2) I would have a static such as static (inside,outside) tcp 208.24.37.11 smtp 192.168.10.30 smtp netmask 255.255.255.255. My MX record would be mail.mydomain.com 208.24.37.11

If traffic fomes in sourced from 1.1.1.1 I want to redirect that smtp traffic to a different internal address of 192.168.10.31. All other smtp traffic can be forwarded to the 192.168.10.30 address. I hope this makes sense. Thanks again.