EdC

i think you are right… have to dual home the server so that it all stays straight…. Let me try that..

Oh, btw, I use 1:1 NAT for the server — should I be using Many 1:1 NAT or Virtual Server? Would that help?

Peter — first off, thanks for the assist. Failover when WAN1 fails works like a charm. But I want the two addresses (one from each ISP's bank of 5 Static/Public IPs) to both be live as I run Active/Active. So if an SMTP SYN comes in on WAN1 to IP 63.x.x.x:25 it should go to the internal 192.168.x.x SMTP Server. And if an…

Still doesn't work. Interestingly enough, I can trace the response from the Exchange Server and it is clearly Internal IP to Remote IP. The Zyxel properly translates this to the Public IP (the correct one) but then sends it to the wrong WAN interface. I added a Policy Rule that says for any source address of the Public IP,…

if I am doing SMTP — would I change 80 to 25? or have a group of both?

Sorry to bring this up again, but I have the exact same problem. Re-configured everything to look just like said above and no luck. All works well through the primary connection (WAN1) when it comes in from WAN1, but when it comes in from WAN2 is goes back out WAN1… If i physically pull the WAN1 ethernet from the USG 200…

AHA -- so for an email server where IP address matters (because of DKIM, SPF, DMARC, etc. 1:1Nat is the way to go.... Thank you again

I fixed that and that will likely address the issue with getting the wrong certificate. But I still have two questions -- why use Virtual Server vs. 1:1Nat. The reference article says Virtual Server and several other KBs say 1:1Nat. Not sure which is which. And the second question is why does the Microsoft Remote…