Endian Firewall 3.0 SMTP proxy issue

[Guest]

[Metalhead-666]

Hi,

I am using Endian Firewall 3.0 and installed as VM on ESX 5.5

My Exchange box is on another box hyper-v, before my internet router did port forward INTERNET > 192.168.1.178 port 25 (Exchange 2010) server.

I changed the port forward INTERNET > 10.10.5.178 port 25 (Exchange 2010) server.
I did install my Endian Firewall with 10.10.5.254 address (GREEN), 192.168.1.249 (RED), I added a nic to my Exchange server with 10.10.5.178
I routed all mail to smarthost (10.10.5.254) Endian firewall it works ok, mail will flow thru Endian firewall to the internet.
The problem is that the mail that is send to my server is not recieved on Exchange 2010, I see in Endian Firewall it does recieve messages because the counter will go up.

When I replace the portforward to NTERNET > 192.168.1.178 port 25 (Exchange 2010) server. I can recieve mails again.
So I only can send thru Endian Firewall not recieve any messages. Please help.

[mmiat]

uhm, it's not clear to me the structure of your network
anyway, are you sure the problem is not in Exchange? maybe it's configured to answer (bind) only to nic1

[Metalhead-666]

Hi,

My exchange server listens to all nics on port 25, I even did disable the firewall on the server to make sure it was not the issue.

I think it has something to do with INTERNET > ROUTER (NAT) PORT FORWARD > ENDIAN > EXCHANGE

[dda]

I am not clear either but I have been having problems and had to replace dns names with ip addresses to get my mail working on 2.52

[Metalhead-666]

Okay again  ,

The internet 82.x.x.x ip is on my Zyxel router this router does NAT/Port forward port 25 to my endian firewall with ip 192.168.1.249 (RED) and then (GREEN) 10.10.5.254 is connected to my Exchange 2010 10.10.5.178

I have put (GREEN) in transparant mode

Sending mail works
recieving mail doesn't but in the home screen of Endian I see the counter recieving mail increasing. So it seems the mail is received and scanned by Endian, but not delivered at 10.10.5.178

When I change the portforward that points to my (RED) interface to my Exchange server ip it works so there is something wrong in my Endian setup.

[speccompsol]

In order for the EFW to proxy/scan your inbound messages:
  Do Not Port Forward TCP/25 from the 'red' interface to your exchange server
  Set the Red interface to 'Active' on the SMTP Proxy main page
  On the Incoming Domains, add your email domain (example.com) and your exchange server ip address (10.10.5.xx)


If you do not want the EFW to scan your incoming messages, just use a Port Forwarding rule and set the SMTP proxy to 'inactive' for the Red interface [if a port forwarding rule is enabled, messages will bypass the smtp proxy regardless of whether smtp proxy is active on Red interface]