How to Configure usable IP range of addresses

Hi, Srinivasan, and welcome to the UTM Community!

With UTM, it is not necessary to have a default gateway within your subnet.  You could, for example assign x.x.x.64/32 to your WAN connection and have a default gateway of x.x.x.1.  The default gateway should be the IP of your ISP's router to which you connect.  If that is x.x.x.65, then that is correct.

You should not need to reserve x.x.x.71 as a broadcast address - you can use it along with 66 through 70.

For example, create an Additional Address on eth1 named "Mail" with x.x.x.66/32.  You can receive mail to your mail server using a NAT rule like 'DNAT : Internet -> SMTP -> External [Mail] (Address) : to {mail server}'. You can send mail from .66 using 'SNAT : {mail server} -> SMTP -> Internet : from External [Mail] (Address)'.

Cheers - Bob

Hi Bob,

Meanwhile i have started configuring the DAT / SNAT as you mentioned. I am clear with "External [Mail] (Address)", it is the additional ip address i have created and the IP is 182.156.255.67. But i am not clear with "to{mail server}". I assume it will be my local mail server address and i added the same in the NAT rule and instead of SMTP i have added http service to access the internet.

If i ping what is my Ip form the local server it is showing 182.156.255.67 correctly but not able to access the internet inbound / outbound.

NAT Rules i have created

'DNAT : Internet -> http-> External [Mail] (182.156.255.67) : to {172.22.0.242}'.

'SNAT : {172.22.0.242} -> http-> Internet : from External [Mail] (182.156.255.67)'.

Thanks

MKS

Hi Bob,

Meanwhile i have started configuring the DAT / SNAT as you mentioned. I am clear with "External [Mail] (Address)", it is the additional ip address i have created and the IP is 182.156.255.67. But i am not clear with "to{mail server}". I assume it will be my local mail server address and i added the same in the NAT rule and instead of SMTP i have added http service to access the internet.

If i ping what is my Ip form the local server it is showing 182.156.255.67 correctly but not able to access the internet inbound / outbound.

NAT Rules i have created

'DNAT : Internet -> http-> External [Mail] (182.156.255.67) : to {172.22.0.242}'.

'SNAT : {172.22.0.242} -> http-> Internet : from External [Mail] (182.156.255.67)'.

Thanks

MKS

Start with DNS best practice.  Does that resolve your issue with the DNS blocks shown in the Firewall Live Log?

Cheers - Bob

If you are publishing a web server, MKS, the better solution is Webserver Security.  If you have that subscription, you will want to start a new thread in that forum.

If you need to publish Server101 using NAT rules, I would use:

1. DNAT : Internet -> Web Surfing -> WAN [Server101] (Address) : to {internal Server101 host}
2. SNAT :{internal Server101 host} -> Any -> Internet : from WAN [Server101] (Address)

Cheers - Bob

Hi Bob,

I will rephrase the same for my low level understating (I am not good in router configuration). Please find the values below if I am right

DNAT

Internet: InterntIPV4

Web Surfing: http

WAN [Server101] (Address): 182.156.255.67

 {internal Server101 host}: 172.22.0.3 (created a host object in network definition with the local IP)

Please let me know if the values are right. Also please tell me if there is additional setting in the DNS.

I need your help on this Bob

thanks

Did you follow the link above to DNS best practice?

Cheers - Bob

Yes I followed Bob but still not able to configure my static IP. Is that okay can I give my Sophos webadmin URL. So that you can have a look and give me a solution please

Many Thanks

Bob

Bob, I have upgraded my basic license to full trial license of all modules.

regards

MKS