Security World: Re: email ports forwarding w/ existing local email server.

> /sbin/iptables -t nat -A POSTROUTING -s 192.168.0.0/24 --dport 25 -j
> SNAT --to-source=MY_FIREWALL_EXTERNAL_IP
>
> That's OK?

Looks alright to me, but it's been a while since I last used the SNAT target.

> If yes, is it enough or I have to specify something more?

That depends on what you want. It also depends on what other rules you have
in your iptables.

The command above will enable sending mail via SMTP only, because you
restrict it to port 25. POP, IMAP and mail submission (port 587) will not
work.

Security World