Thank you very much for your information. I was unable to test this on our device since its in a remote location but I am happy to know someone else was able to shed some light on this.

Cheers,
Sherwyn
@infolookup

I just went through this myself, and discovered that you really can’t create a VIP with two nonconsecutive ports.

If you need say port 110 and port 25 to be forwarded, you will need to create two VIP’s.

FG60C (vip) # edit Test-VIP-SMTP
FG60C (Test-VIP) # set extip 192.168.10.10 => setting up the external IP
FG60C (Test-VIP) # set extintf wan2 => binding to an external interface
FG60C (Test-VIP) # set portforward enable => enable port forwarding
FG60C (Test-VIP) # set mappedip 172.29.19.10 => mapping to an internal IP
FG60C (Test-VIP) # set extport 25 => setting up external port
FG60C (Test-VIP) # set mappedport 25 => mapping to internal destination port

FG60C (vip) # edit Test-VIP-POP3
FG60C (Test-VIP) # set extip 192.168.10.10 => setting up the external IP
FG60C (Test-VIP) # set extintf wan2 => binding to an external interface
FG60C (Test-VIP) # set portforward enable => enable port forwarding
FG60C (Test-VIP) # set mappedip 172.29.19.10 => mapping to an internal IP
FG60C (Test-VIP) # set extport 110 => setting up external port
FG60C (Test-VIP) # set mappedport 110 => mapping to internal destination port

Note, you then have two VIP’s , and you create two firewall rules, one for each.
Set up the firewall with the proper service, and that traffic will flow. If you set
up a firewall with “ANY” as the service, then you will only catch the first one, which won’t work for POP3.

If you want to set up a range, the extip can only be set with an integer (a single port)
Set it to the first port, then set up the range in “mappedport”

It was asked, how do you forward 10000 to 20000:

FG60C (vip) # edit Test-VIP-RANGESERVER
FG60C (Test-VIP) # set extip 192.168.10.10 => setting up the external IP
FG60C (Test-VIP) # set extintf wan2 => binding to an external interface
FG60C (Test-VIP) # set portforward enable => enable port forwarding
FG60C (Test-VIP) # set mappedip 172.29.19.10 => mapping to an internal IP
FG60C (Test-VIP) # set extport 10000 => setting up external port
FG60C (Test-VIP) # set mappedport 10000-20000 => mapping to internal destination port

Note2: I have a FG60C, and I’m just figuring this out on the fly, so please don’t take my word for it.

http://docs.fortinet.com/fgt/handbook/cli_html/wwhelp/wwhimpl/js/html/wwhelp.htm

Thank you for your comment.

Is my phone rooted? Yes

My concern would have still exist even if my phone is not root, I have a concern about my privacy, if I delete something I want it to be deleted.

If I lost my phone and something found it, I dont want them finding all my private sms, or have some company logging and possibly accessing my sms.

Thank you for visiting my blog, as it relates to your question have you tried what I have suggested in the post?
I am only forwarding one IP there but you can easily add more than one. The question I have is are you forwarding both ports to the same internal IP? if so just do:

FG100A (vip) # edit Test-VIP
FG100A (Test-VIP) # set extip 192.168.10.10 => setting up the external IP
FG100A (Test-VIP) # set extintf wan2 => binding to an external interface
FG100A (Test-VIP) # set portforward enable => enable port forwarding
FG100A (Test-VIP) # set mappedip 172.29.19.10 => mapping to an internal IP
FG100A (Test-VIP) # set extport 25 => setting up external port
set extport 225 => setting up external port
FG100A (Test-VIP) # set mappedport 25 => mapping to internal destination port
FG100A (Test-VIP) # set mappedport 225 => mapping to internal destination port

That should work.

Thank you for visiting my blog, it looks like this behavior did carry over pass the RTM cause we didn’t install the RTM we installed the final release.