Configuring checkpoint as mail relay using MTA

[Andy_N]

We have currently setup our R80.10 Cluster as an MTA to receive external mail.

Reason is filtering span and viruses.  

We set up MTA as described on picture.

MX record has been changed to our CP external IP (87.245.x.x).

We tried sending test email via telnet with no luck. No response from server.

Which additional steps should be performed (security rules,  NAT rules) to configure CP properly?

Regards

[G_W_Albrecht]

Did you follow the Threat Prevention Administration Guide R80.10 p.52 f ? Your screenshot does not look like you did so 🤔

[Andy_N]

Yes, we did.

Check box implement rule is selected

We not using TLS

[Andy_N · Accepted solution]

The problem was solved.

Actually it is not possible use MTA on virtual IP (proxy ARP address) – only on physical IP interface address.