I have a juniper ssg 5 as my firewall
These are a couple of things I have tried:
I used the wizard to create route based vpn
I've tried creating multiple policies based on the different services that seem appropriate, starting with pop3,imap,ms-exchange and anything else that seemed close
Almost everything that I try seems to have no effect, using mxtoolbox on my public ip shows all ports are closed. I suppose my ISP's router could also be blocking the traffic, but I would have to call them to have them reconfigure it.
I am able to send mail out, but replies seem lost, no error msgs are generated on either side.
We were assigned one static IP and 5 public IP's, according to ATT, nothing is blocked whatsoever port-wise.
At this point, I have tried creating a virtual IP that is the same as the static IP and forwarded smtp traffic through port 25 to the internal IP of the mail server. I have also added policies to allow traffic from any IP to pass through both the public IP and the internal IP for mail (keep in mind the "public" IP is different then the "static" IP.
What also confuses me is this: since I've added this virtual IP (once again, the same as the static IP), forwarded it to the internal mail server IP AND selected to send the traffic through port 25, do I need to mess with the NAT settings on the policies at all?