Title: Message
GAROWNTEED it's the fix-up protocol that Don stated in the first response. Once disabled it'll work IN-->OUTBOUND just fine. I've correct this on 1/2 dozen PIX's. It's a CISCO PIX issue.
Of course CISCO enthusiasts will tell you it's a Exchange ESMTP issue as "they say" only Exchange has this problem. Either way disabling FIXUP corrects it and since CISCO won't fix it you're not left with many alternatives short of eliminating the PIX all together.
 
-Rick
-----Original Message-----
From: Jonathan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 6:10 AM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

ya the mail is all sitting in the queue set to retry.
-----Original Message-----
From: Ellery July [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 8:40 AM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

Did you check the mail queue to see if the mail is there?

 

-----Original Message-----
From: Jonathan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 7:37 AM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

 

Dns records are forwarding and MX record is being populated.  I can telnet out on port 25.  It seems to me that the mail is being stopped at the exchange server.  I can send mail in fine just outbound doesn't work.  I haven't disabled the fixup yet I am going to try that next.

-----Original Message-----
From: Ellery July [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 8:28 AM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch.

 

 Is the mail being stopped on the exchange server or held in the senders mailbox?   Can you telnet or ping from your box to the outside world using port 25 and/or 110?

 

-----Original Message-----
From: Jonathan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 6:55 AM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

 

Yes and Yes to your questions.  Sorry for the seamingly dumb response a little tired after a day of fighting fires.  Thanks for your help

 

Jonathan

-----Original Message-----
From: Don Ely [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 30, 2001 4:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

Uhh....  YEAH! 

 

I guess with a question like that I should ask, do you have an MX record for that server?  Do you have the IP address for that MX record assigned to your server?

-----Original Message-----
From: Jonathan [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 30, 2001 1:07 PM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

Do I use the public address if I am already NATing it?

-----Original Message-----
From: Don Ely [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 30, 2001 3:15 PM
To: MS-Exchange Admin Issues
Subject: RE: Pix Firewall

Disable the SMTP Fixup for starters.

 

Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any

-----Original Message-----
From: Jonathan [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 30, 2001 12:13 PM
To: MS-Exchange Admin Issues
Subject: Pix Firewall

I am really stumped on this one and am hoping that I am just missing something simple.  I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world.  I receive mail just fine.  I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out.  Any ideas on stuff I might have missed?

 

 

Thanks everyone,

 

Jonathan

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

Reply via email to