- Cisco Spam & Virus Blocker -
Appendix
c
About Network Address Translation (for Step 10)
NAT is the translation of an IP address used within one network to a
different IP address used in another network. For example, you might want
route email to a public IP address, while keeping all of your other addresses
private. If you use Network Address Translation on your router or firewall, you
may not need to change your MX records, but you may need to configure
port forwarding to ensure email gets routed to the Blocker.
For instructions on changing your NAT translation tables, consult the
documentation for your router or firewall.
In this example, the router/firewall uses NAT to route email from the
public IP address of 192.0.2.1 to the internal IP address of the mail server
at 192.168.0.7. The
MX records do not
need to be modified,
but port forwarding
must be changed to
route Port 25 traffic
to the Blocker.
Before
A Record: mail.mydomain.com IN A 192.0.2.1
MX Record: mydomain.com IN MX mail.mydomain.com
Port forwarding: Port 25 traffic to 192.168.0.7
After
A Record: mail.mydomain.com IN A 192.0.2.1
MX Record: mydomain.com IN MX mail.mydomain.com
Port forwarding: Port 25 traffic to 192.168.0.8
SMTP route between Blocker and mail server
96I6
H:G>6A
&
'
47-21639-01
Firewall or Router with NAT
public IP : 192.0.2.1
PORT FORWARDING
ADD SMTP ROUTES
Cisco Spam & Virus Blocker
private IP : 192.168.0.8
mail.mydomain.com
Mail Server
private IP : 192.168.0.7