McAfee SG310, Руководство администратора

Страница: 179 / 412

McAfee UTM Firewall 4.0.4 Administration Guide 179
Firewall menu options
NAT
Figure 182 Port forward mail server example
12
Click Finish. In conjunction with DNS MX records pointing to the IP address of the UTM Firewall WAN,
and a correctly configured internal mail server, you should now have the ability to receive SMTP mail from
external hosts.
Example: Advanced port forwarding rule for SSH
This example forwards the SSH (Secure Shell) protocol to an internal server called the build server. SSH
allows encrypted remote access, typically to a server running Linux, BSD, or another UNIX-like operating
system. This rule uses port 2222 for SSH rather than the standard SSH port of 22. Forwarding the SSH port
allows remote access using SSH to the UTM Firewall appliance itself, which runs an SSH server on port 22.
A remote user connects to port 2222 on the UTM Firewall appliance’s Internet address in order to access
port 22 of the Build server. This example assumes there is an address defined called “Build server.”
Figure 183 Port Forward for SSH example
1
From the Firewall menu, click NAT. The Port Forwarding page appears ( Figure 183 ).
2
Click the add below icon for the lowermost rule. The Modify Port Forward page appears.
3
Click Advanced. The Advanced Port Forward page appears.
4
In the Descriptive Name field, enter SSH to Build server.
5
Leave the Enable and Create Packet Filter Rule checkboxes selected.