You have configured the SMTP Security Server to examine
outbound email that is originating from your own SMTP server.
The problem is that FireWall-1's SMTP Security Server has done
an MX lookup to retrieve the IP Address of the SMTP server at
the destination domain, but despite the possibility it has retrieved
multiple
IP addresses, it only tries the first one. If this IP address is
unresponsive,
you will get this error message.
If you wish to filter outbound SMTP, the only way is to do so between
an internal mailhost and a mailrelay server on your own DMZ. Then, the
SMTP connections between the mailrelay to the Internet is allowed outbound
without passing it through the security server.
The rulebase will need to specify a "mailrelay to Any using SMTP " rule
first,
before any other rule that would use an SMTP Resource Object in the Services
field.
Jerald Josephs
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 09, 2000 3:05 AM
Subject: [FW1] Final MTA-Connection Failed
>
> Dear All,
>
> I set a rule for smtp traffic, I have also set the resource and routing.
But
> I still get an error where the incoming SMTP mail is rejected and the info
> says final MTA-connection Failed.
>
> any ideas
>
> regards,
>
> Faisal Yamin
> Systems Administrator
> LASMO Oil Pakistan Limited
> mailto:[EMAIL PROTECTED]
> http://www.lasmo.com
>
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
