What PIX version are you running? I am only familiar with 5.x and up. They talk about the conduit command in the manual, but state that it is outdated and one should use the new static/access-list command. If you are running version 5.x or greater, email me privately [EMAIL PROTECTED], so we can take this off the list.
> -----Original Message-----
> From: Magdy Ibrahim [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, April 24, 2001 2:13 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [IMail Forum] Imail behind the PIX
>
>
> Dear Adrian,
>
> Now all users faced the same problem " they cannot receive their
> mail using the mail client...
>
> About POP3 110 port I already opened it, so Please take a look at
> this sample of configuration and tell me if there is something
> wrong:
> static (inside,outside) 213.131.67.11 192.168.111.10 netmask
> 255.255.255.255 0 0
> static (inside,outside) 213.131.67.12 192.168.111.11 netmask
> 255.255.255.255 0 0
> static (inside,outside) 213.131.67.13 192.168.111.14 netmask
> 255.255.255.255 0 0
>
> conduit permit tcp host 213.131.67.11 eq pop3 any
> conduit permit tcp host 213.131.67.11 eq www any
> conduit permit tcp host 213.131.67.11 eq smtp any
> conduit permit udp host 213.131.67.11 eq 25 any
> conduit permit udp host 213.131.67.11 eq 80 any
> conduit permit udp host 213.131.67.11 eq 110 any
> conduit permit tcp host 213.131.67.11 eq 8383 any
> conduit permit udp host 213.131.67.11 eq 8383 any
> conduit permit tcp host 213.131.67.12 eq pop3 any
> conduit permit tcp host 213.131.67.12 eq www any
> conduit permit tcp host 213.131.67.12 eq smtp any
> conduit permit udp host 213.131.67.12 eq 25 any
> conduit permit udp host 213.131.67.12 eq 80 any
> conduit permit udp host 213.131.67.12 eq 110 any
> conduit permit tcp host 213.131.67.12 eq 8383 any
> conduit permit udp host 213.131.67.12 eq 8383 any
> conduit permit tcp host 213.131.67.13 eq pop3 any
> conduit permit tcp host 213.131.67.13 eq www any
> conduit permit tcp host 213.131.67.13 eq smtp any
> conduit permit udp host 213.131.67.13 eq 25 any
> conduit permit udp host 213.131.67.13 eq 80 any
> conduit permit udp host 213.131.67.13 eq 110 any
> conduit permit tcp host 213.131.67.13 eq 8383 any
> conduit permit udp host 213.131.67.13 eq 8383 any
>
> Please any Idea....
>
> Magdy
>
>
> Is the client accessing the mail via pop outside your PIX? If so,
> then
> >you ned to open up port 110, or have them use webmail. If his MX
> record
> >is the same IP as your MX record for you other clients, then SMTP
> >shouldn't be a problem. Otherwise you need to add another static
> >mapping for that IP and port 25 to your internal server.
> >
> >
> >> -----Original Message-----
> >> From: Magdy H. Ibrahim [mailto:[EMAIL PROTECTED]]
> >> Sent: Tuesday, April 24, 2001 12:58 PM
> >> To: [EMAIL PROTECTED]
> >> Subject: [IMail Forum] Imail behind the PIX
> >>
> >>
> >> Dear All,
> >>
> >> I have a problem and I need your help to fix it....
> >> Today I installed my PIX firewall, my mail server now behind
> >> the firewall
> >> all my internal network clients can access theire mail
> >> through the web and
> >> the outlook without problems....
> >> But I have an ISDN client with domain mail hosted on my
> >> server "behind the
> >> PIX" can not receive his mails but can send them.....
> >> Is there any Idea to fix this problem....
> >>
> >> Please help as I ddi not find any solution for it???
> >>
> >> Any Idea will be appreciated.....
> >>
> >> Magdy
> >>
> >>
> >> Please visit http://www.ipswitch.com/support/mailing-lists.html
> >> to be removed from this list.
> >>
> >> An Archive of this list is available at:
> >> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >>
> >
> >
> >Please visit http://www.ipswitch.com/support/mailing-lists.html
> >to be removed from this list.
> >
> >An Archive of this list is available at:
> >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
>
>
> ________________________________________________________________
> Thanks for using Webmail service at purenet.com.eg
>
>
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
