Having trouble configuring Firewall to allow Mail Server Access

[fbeye]

Hello!

So, I have 8 STATIC IP's (6 usable).

I made Virtual IP's for each of the 6 IP's
I made NAT 1:1 from each Virtual IP to it's specific LAN IP.
I configure that specific IP 1 at a time on a host and verify it has correct WAN IP via "whatsmyip"

So, everything is set as it should be, I assume, as the IP's are correct to their destination.

I have an email server on WAN x.x.x.180 to LAN 192.168.5.180
The Ports that are on the .180 are 587 (SUBMISSION) 25 (SMTP) and 993 (IMAP/S).
The only things I have for firewall are;
PASS - WAN - IN -IPV4 - TCP -SOURCE (ANY)- SOURCE PORT (each one mentioned) - DESTINATION (192.168.5.180) - DESTINATION PORT (each one mentioned).

But, I am unable to connect! I have no other NAT or Port Forwarding set up, as I assume I would not need Port Forwarding because of the 1:1?

Any suggestions?

[fbeye]

Alright so by removing SOURCE PORT and making it ANY, it works now. Interesting.

Any explain in what scenario a SOURCE Port would be utilized?

[Greelan]

Very rarely. Usually services/applications use a randomised source port. In some cases you might be able to specify the source port. In other caes (eg active ftp) that's the standard behaviour. As part of that you might want to lock down your firewall rules further and limit the source port on the rule.

[fbeye]

Hmm. I am unsure exactly what you mean by that… When utilizing a source port, it did it work at all and I could only get it working by having “any” in source port. Are you saying that I can somehow specify a source port and it still work? I of course would like that… in my mind “Any” sort of negates any security as I WANT it to only be the specific ports being initialized.

[Greelan]

I wouldn't worry about it if I were you. Your mail clients are unlikely to allow the source port to be specified.

[fbeye]

How do I set as "resolved" ?

[Greelan]

Edit the topic heading to include “[RESOLVED]” at the beginning.