Separating Interent traffic and Mail traffic

[Randy Haddon]

I am needing to separate the how the outside sees our Internet traffic and mail traffic.

the current NAT statement is

object network obj-10.0.0.0
 nat (inside,outside) dynamic 65.X.X.X

ACL

access-list acl-outside line 47 remark SMTP Inbound
access-list acl-outside line 48 extended permit tcp any host 65.X.X.5 eq smtp
access-list acl-outside line 49 remark HTTP Inbound for OWA server
access-list acl-outside line 50 extended permit tcp any host 10.X.X.31 eq www log
access-list acl-outside line 51 remark HTTPS Inbound for OWA server
access-list acl-outside line 52 extended permit tcp any host 10.X.X.31 eq https log

is there a way to have the outside see WWW traffic see one IP address 65.X.X.30 and SMTP traffic as 65.X.X.40

This is on a 5520 with 8.47

Thanks for the hlep

Randy

[jj27]

So you want source SMTP traffic from the inside to be NAT to the IP 65.x.x.40?

object service SMTP
service tcp destination eq smtp

object network obj-65.x.x.40
host 65.x.x.40

nat (inside,outside) source static any obj-65.x.x.40 service SMTP SMTP

That should do the trick.