How to set up relay host in dmz via public if

[cyberurmel]

Hi all , 

we have a Cluster ESA C300V and a solution with 2 interfaces. One Public ( is in DMZ Range)  and one internal. As i can see for the interfaces public there is HAT and RAT configured for internal only HAT. ok..everything works fine. 

Now the question is how its possible to set up a standalone mailserver with a different external domain (which only must send not receive mails) and also stands in the DMZ. As i Created a Sender Group with this IP and a MF Policy with Relay i thought it should work via the Public if.

But i can see in the mail_logs for testmail there was the information "rejected by RAT" ..

Is it the wrong way to impement this or where could be my issue??

Thanks a lot 

Regards 

C 

[cyberurmel · Accepted solution]

Hi, 

ok looks like find the issue. Had to set the group rule for this to Number one in the HAT. Now it seems to work.