[c-nsp] can cisco pix "boomerang" mail traffic?

Raul Lopez Nevot r.nevot at gmail.com
Tue Sep 9 15:20:23 EDT 2008


Hello,

On Tue, Sep 9, 2008 at 9:03 PM, Rogelio <scubacuda at gmail.com> wrote:

> Can a Cisco PIX "boomerang" a packet--i.e. route a packet coming from the
> internal network that is destined for an Internet host back into
> the internal network via NAT?
>
> I ask because I have have email clients pointing to mail.domain.com, and
> unless I do a split DNS with my mail A record pointing to a 192 address
> inside and an external mail A record pointing to my public IP address, I'm
> not quite sure how to do it.
>

If I have understood your scenario, sure you will do split DNS, but you can
let the PIX work for you. Take a look to
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml

regards


More information about the cisco-nsp mailing list