User guide

Proxied Services
Reference Guide 81
When using incoming Static NAT with SMTP, auth must be added (see
“auth (ident)” on page 53) to the Services Arena. Configure auth to allow
incoming auth to the Firebox. This enables outgoing mail messages to
flow unrestricted from behind the Firebox to the numerous SMTP servers
on the Internet that use auth to verify other mail servers’ identities and
allows these servers to return messages through the Firebox to the
senders.
Logging incoming SMTP is recommended, but may produce copious log
output. If you do not want to use the SMTP proxy, create a new service
using the Services dialog box with the TCP protocol and port 25.
Characteristics
•Protocol: TCP
• Server Port(s): 25
• Client Port(s): greater than 1023
•RFC: 821
Common Scenarios
Scenario 1
Description
There is an SMTP server on the Optional interface.
Icons in the Services Arena
A SMTP service icon – The Incoming tab should Allow To the
SMTP server from Any. The Outgoing tab should Allow To Any
from Any.
Scenario 2
Description
There is an SMTP server on the Trusted interface.
Icons in the Services Arena
This scenario is configured exactly as in Scenario 1.
StreamWorks
StreamWorks is a streaming protocol for video on demand developed by
Xing Technologies (see http://www.streamworks.com).