RE: Pix Firewall

[Rick Ward - HQ]

Title: Message

I've sent this out before.. but here's another nice way of checking yourself from the outside world.   http://www.zmailer.org/mxverify.html   -----Original Message----- From: Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:47 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall You said you can Telnet out on Port 25 but you didn't say if it was by name. IE check the DNS on outbound. The messages in Queue have a failure status. What is it?? IE Host unknown, network error, didn't send cash to BillG?? This will usually show you more of what is going on.   The SMTP fix-up will kill you on Exchange to Exchange SMTP connections, but not non-exchange. Kill it or but a non ESMTP server in front as a relay like IIS.   Try TELNET 209.43.20.203 25   Then   Try TELNET MAIL.IQUEST.NET 25   The responses should be 220 iquest3.iquest.net ESMTP   If the first works and not the second, you probably have a DNS issue on the Exchange server.   Chad P.       -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:10 AM To: [EMAIL PROTECTED] Subject: RE: Pix Firewall   ya the mail is all sitting in the queue set to retry. -----Original Message----- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Did you check the mail queue to see if the mail is there?   -----Original Message----- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:37 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall   Dns records are forwarding and MX record is being populated.  I can telnet out on port 25.  It seems to me that the mail is being stopped at the exchange server.  I can send mail in fine just outbound doesn't work.  I haven't disabled the fixup yet I am going to try that next. -----Original Message----- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch.    Is the mail being stopped on the exchange server or held in the senders mailbox?   Can you telnet or ping from your box to the outside world using port 25 and/or 110?   -----Original Message----- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:55 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall   Yes and Yes to your questions.  Sorry for the seamingly dumb response a little tired after a day of fighting fires.  Thanks for your help   Jonathan -----Original Message----- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Uhh....  YEAH!    I guess with a question like that I should ask, do you have an MX record for that server?  Do you have the IP address for that MX record assigned to your server? -----Original Message----- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Do I use the public address if I am already NATing it? -----Original Message----- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Disable the SMTP Fixup for starters.   Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -----Original Message----- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PM To: MS-Exchange Admin Issues Subject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple.  I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world.  I receive mail just fine.  I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out.  Any ideas on stuff I might have missed?     Thanks everyone,   Jonathan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.+++ The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm