I've been struggling with an issue between two mail servers behind my Sonicwall NSA 2400. Both servers interact with the outside world just fine, but they cannot successfully send e-mail to each other. Here's the setup:
There are three interfaces on the NSA 2400 at play here: X0, X2, and X4.
SERVER1 (my email server)
Interface: X0
Internal IP: 192.168.1.5 (255.255.255.0)
Public IP: 10.9.8.7 (255.255.255.240)
SERVER2 (not my email server, but connected to same firewall on different interface)
Interface: X2
Internal IP: 192.168.2.6 (255.255.255.0)
Public IP: 10.9.8.4 (255.255.255.240)
Both the X0 and the X2 interface are in the LAN zone (to use Sonicwall terminology), but different subnets. The external IPs of both machines are in teh same subnet in the WAN zone on interface X4.
The firewall is set to allow traffic from LAN -> WAN, WAN -> LAN, LAN -> LAN, and WAN -> WAN on port 25 in both directions between the two servers. Each server is attempting to locate each other using the public IP. The public IPs NAT to the respective internal IPs for both inbound and outbound traffic and I know that it's done correctly since our mail servers are having no issues with any other mail servers.
I've done packet traces and I seem to be getting a TCP handshake error. I can't really figure out much beyond that.