McAfee SG310 Administration Manual page 178

Firewall menu options
NAT
Where possible, add packet filter rules to restrict access to the internal mail server to trusted external hosts
only.
First, add a service group to group email services (SMTP). From the Firewall menu, select Definitions
1
> Service Groups and click the New button. The Modify Service Group page appears
Figure 181 Modify Service Group
Enter Email in the Name field.
2
Select the SMTP checkbox. This is the protocol remote clients use for sending mail via the server.
3
Click Finish. The email service group definition is created. Next, create the port forwarding rule that uses
4
the service group.
From the Firewall menu, click NAT > Port Forwarding tab. The Port Forwarding page appears.
5
If this is the first rule defined on the page, click New. If there are other rules already defined, click the
6
add above or below icon to place the rule in the position you want. The Modify Port Forward page appears.
In the Descriptive Name field, enter Mail server.
7
Leave the Enable checkbox selected.
8
Select your Internet connection in the Destination Address field.
9
Next to Ports, click Show Definitions. Select E-Mail from the Services list.
10
Enter the IP address of your internal email server in the To Destination Address field.
11
the completed page as it should appear at this step of the procedure:
178 McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 181).
Figure 182 shows