This has been a common scenario over the years. A mail filtering
device gets instituted, and non-smtp traffic breaks. In a situation
where mail was being static NAT'd, you have to find a way to split the
traffic to two different devices. You have a couple of choices:
1. Two static NAT's. If you have two public IP addresses you can use,
one gets static NAT'd to the mail filtering device and the other to the
mail server. Filter exceptions need to be changed, and public DNS
records may need to be changed (if using URL's to access non-smtp
stuff).
2. Proxy. Convert the static nat to proxy, and redirect the desired
ports to different internal addresses. DNS doesn't have to be changed,
but filter exceptions do, and access rules need to be added/changed.
You also may not be able to use port 110, unless you use mail proxy
(which has some issues).
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to
http://www.craigjconsulting.com ***