🚀 go-pugleaf

Huge,

I'm running ipfilter on Sol2.6 and my natrules are simply (well over a
year now and still going)

map  ipdptp0 192.168.X.0/24 -> 212.228.46.51/32 portmap tcp 10000:20000
map  ipdptp0 192.168.X.0/24 -> 212.228.46.51/32 

My mail server runs on the 'nat box' too so has worked all works fine.

Maybe Sol 7 does some different things but I'd doubt it.

I did have to alter sendmail.cf as I put my (nat) machine in the demon
domain but apart from that and adding an ftp proxy line all has worked
fine. 

Likeliest is that incoming email is not handshaking correctly with your
sendmail server. You may need to do some configuration changes - best to
start with a client sendmail config and go from there.

I assume you can get Pop mail to work okay

braham

Huge wrote
> 
> Has anyone tried to connect a small network to demon through a Solaris
> NAT gateway?
> 
> I'm trying to do this, using an LX running Solaris 7 & ipfilter as the
> gate. The NAT, routing, dial-on-demand (aspppd) & all out-going
> initiated services (mail, news, http, etc.) are working fine.
> 
> But, I am having enormous difficulty getting incoming email to
> work. Obviously, I need to run some kind of listener on port
> 25 of the external interface on the NAT box, then do something
> with any incoming connections;
> 
> - Run an MTA on the NAT box and forward the email to the real
>   internal mail server.
> 
> - Proxy the connection to the "real" MTA on the internal box.
> 
> I have given up with the first scenario, since I find sendmail's config
> file incomprehensible, various people have frowned at the security in
> exim and I cannot make postfix do what I want. postfix also has
> implications about how to hide the internal name-space from demon.
> 
> So, I am trying to do the second. If I understand the ipfilter
> manual correctly, I should be able to do this;
> 
> map ipdptp0 10.0.0.0/24 -> 158.152.24.143/32
> rdr ipdptp0 158.152.24.143/32 port 25 -> 10.0.0.11 port 25
> 
> So that;
> 
> - All outgoing connections from 10.0.0.x get mapped onto
>   158.152.24.143. This works.
> 
> - Redirect any connections to 158.152.24.143 port 25 to
>   10.0.0.11 port 25. This doesn't.
> 
> Indeed, if I try 'telnet 158.152.24.143 25' on the NAT
> box, I should expect to find myself connected to port
> 25 on the mail server, right? In fact, I get a "connection
> refused".
> 
> All suggestions gratefully accepted.
> 
> --
>        "The road to Paradise is through Intercourse."
> The uk.transport FAQ; http://www.huge.org.uk/transport/FAQ.html
>                [Delete "nospam." to email me]

-- 
j braham levy                             | Novus Networks Ltd,
email: braham@novus-networks.co.uk        | Church House,
email: braham@clarke8.demon.co.uk         | Parkway, 
Tel: +44-1477-537766 (work)               | Holmes Chapel,
Tel: +44-1782-620580 (home)               | Cheshire, CW4 7BA UK.