Community discussions

MikroTik App
 
Sir William
just joined
Topic Author
Posts: 5
Joined: Wed Aug 11, 2004 5:51 pm

Mail on One Gateway, Everything Else on the Other?

Wed Aug 11, 2004 7:34 pm

We have two connections at our main NOC, a 2Mb/s SDSL and a 1Mb/s Cable connection we use as a backup. Our SDSL provider has decided that they are going to block all outbound port 25 traffic not destined for their SMTP server in an effort to "protect" people from viruses with built-in SMTP engines.

My short term solution has been to cut everybody over to the backup connection, but this is not a desirable full-time option. So what I want to do is direct all SMTP & POP3 traffic (ports 25 & 110) out the Cable gateway while everything else goes out on the SDSL.

FYI, I typically use WinBox for most routine configuration changes and monitoring, but CL is just as good.

Thanks!

Sir William
 
cmit
Forum Guru
Forum Guru
Posts: 1547
Joined: Fri May 28, 2004 12:49 pm
Location: Germany

Thu Aug 12, 2004 12:16 am

You should take a look into the policy routing features of RouterOS. You could mark SMTP/POP3 connections and then route them over the Cable connection.
As you have not given more details, there might be some configuration involved regarding NAT or something else, but this should be the direction to go...
 
Sir William
just joined
Topic Author
Posts: 5
Joined: Wed Aug 11, 2004 5:51 pm

Wed Aug 18, 2004 7:46 pm

Well, what I've tried so far has been unsuccessful, so I'll give some more details and ask for help. :)

All local customer traffic is in 10.x.x.x blocks. I have two outbound connections on different interfaces named "SDSL" & "Cable".

I'm using SNAT masquerading for 0.0.0.0/0 to 0.0.0.0/0 out SDSL.

I thought I should be able to do a SNAT masq for 0.0.0.0/8:25 out Cable. But that doesn't work. I tried 10.0.0.0/8:25 also....no luck.

Should I be doing something different to make this work? I just don't know. What I do know is that I HAVE to make it work and SOON.
 
User avatar
[ASM]
Member Candidate
Member Candidate
Posts: 284
Joined: Sun Jun 06, 2004 12:59 am
Location: Sofia, Bulgaria
Contact:

Thu Aug 19, 2004 2:20 am

Try placeing masq rule 10.0.0.0/8:25 before 10.0.0.0/8 it should work
 
signal
newbie
Posts: 33
Joined: Thu Aug 19, 2004 4:44 am

Thu Aug 19, 2004 4:51 am

Sir William,

You want 0.0.0.0/0:25, not 0.0.0.0/8:25

so use a dst-address of 0.0.0.0/0:25

Who is online

Users browsing this forum: Abdelhadi, erlinden, grosnico and 48 guests