Greetings,
I can give you an example of how our PIX is setup. First, I am
assuming that you have your email server on the inside of your network and
not on a DMZ. I use the following statements (changed to suit your IP)
nat (inside) 0 access-list 101
static (inside,outside) 212.73.223.66 10.0.0.15 netmask 255.255.255.255 0 0
conduit permit tcp host 212.73.223.66 eq pop3 any
conduit permit tcp host 212.73.223.66 eq smtp any
conduit permit tcp host 212.73.223.66 eq 8383 any
conduit permit tcp host 212.73.223.66 eq 8384 any
access-list 101 permit 10.0.0.0 255.0.0.0 any
Note that you may have to play a little with the access list because I have
my mail server on the DMZ and I use the access list to allow my inside users
to go there. I hope this helps.
Jim
----- Original Message -----
From: "John Carter" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 10:31 AM
Subject: Re: [IMail Forum] Imail behind PIX 506 (IOS531)
> I probably know less about PIX than most, but after our "static"
> statements, we used "conduit" statements to open the PIX for traffic --
> as in:
>
> conduit permit tcp host 212.73.223.66 eq smtp any
>
> But maybe you have a different set-up than us.
>
> John
>
>
> Magdy Ibrahim wrote:
> >
> > Dear All,
> >
> > Again with theImail issue with PIX.....
> > I installed the PIX and the Imail 6.06 with this conf. on the PIX
> > firewall:
> > static (inside,outside) 212.73.223.66 10.0.0.15 netmask
> > 255.255.255.255 0 0
> > access-list acl_out permit tcp any host 212.73.223.66 eq smtp
> > access-list acl_out permit tcp any host 212.73.223.66 eq pop3
> > access-list acl_out permit tcp any host 212.73.223.66 eq 8383
> >
> > I tried to send or receive mails from the Imail server which has
> > the IP: 10.0.0.15 but I failed to communicate with any external
> > mail server.
> >
> > in the log file I found MX connect fail error...
> >
> > I knew that there are many of you guys working with this case...
> > is there any problem with this conf. on the PIX?? OR are there any
> > additional conf. I have to do on my system to make it working such
> > as DNS and the Imail server itself??
> >
> > Please I need you help sooon
> >
> > worm regards,,,
> >
> > Magdy
> >
> >
> >
> > ________________________________________________________________
> > Sent via the KillerWebMail system at purenet.com.eg
> >
> >
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
