PLANET CS-2001 User Manual

Page 494

483

13.1.3 Deploying CS-2001 in between Gateway and Mail

Server and Filtering Spam with Global Rule (Mail Server Is

Deployed in DMZ under Transparent Mode)

Prerequisite Setup

Gateway: 172.16.x.x/16

Configure Port1 as LAN1.

Configure Port2 as WAN1 (172.16.1.12) and connect it to the gateway.

Configure Port3 as WAN2.

Configure Port4 as DMZ1(Transparet Routing mode) and connect it to the mail server

(LAN IP: 172.16.1.13, WAN IP: 61.11.11.11)

Step 1. Setup a mail server in DMZ, name it as “supportplanet.com.tw”, configure

its IP address as 172.16.1.13, and then use an external DNS server to

resolve domain names.

Step 2. Under Policy Object > Address > DMZ, set as below:

（Figure 13-30）

Figure 13-30 Address Setting for Mail Server

Step 3. Under Policy Object > Service > Group, set as below:

（Figure 13-31）