NAT for public access

[crono_79]

hey guys,

im trying to give public acces to my web server and mail server, this what i have done, pls tell me where i went wrong

lets suppouse my public ip is 1.2.3.25, i also own 1.2.3.26 and 1.2.3.27

so.. i:
1.- created an object for the web server with internal ip (192.168.1.60), another one for mail server with internal ip (192.168.1.61)
2.- created an object for the web server with external public ip (1.2.3.26), another one for the mail server with external public ip (1.2.3.27)
3.- created a NAT rule:
original packet
from: any
to: web server public ip object (1.2.3.26)
translated to:
from: = original
to: web server internal object (192.168.1.60)
service: = original
4.- created a NAT rule for the mail server similar as above

this is how is supposed to be done? am i missing something?

questions:
the IPs i own, that are not assigned to CP (1.2.3.26 & 1.2.3.27 in this example), do i have to configure them in some other place?

CP is R62, on IPSO 4.1

[david]

may be easier use automatic nat instead?

create an object with the internal address of your mail server, then on the nat tab select automatic & enter the public ip.

if you want to use manual nat, you will need an additional rule to nat the traffic outbound from your server

from: web server internal object (192.168.1.60)
to: any
translated to:
from: = original
to:web server public ip object (1.2.3.26)
service: = original