RE: mail and PIX

2000-12-19 Thread Liwanag, Manolito

Jeff,

I don't know if you have tried this.

static (inside,outside) 64.1.2.3 192.168.1.1 netmask 255.255.255.255 0 0
conduit permit tcp host 64.1.2.3 eq smtp any
conduit permit tcp host 64.1.2.3 eq pop3 any
conduit permit tcp host 64.1.2.3 eq www any
conduit permit tcp host 64.1.2.3 eq 443 any

I just used 64.1.2.3 as an example.  If you will be using Web access in
Exchange then you need to open www. Otherwise, perhaps just use the first
two conduit lines.

Hope that helps.

Rgds,
Manolito



-Original Message-
From: Jeff Frontera [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 18, 2000 11:09 PM
To: [EMAIL PROTECTED]
Subject: mail and PIX


I've recently installed a (2) interface PIX 515...everything seems to be
fine except that remote users can no longer retrieve their email.  My client
has only one exchange server set up on the inside network.  All local inside
users can send and receive mail with no problem.  The DNS is maintained by
the client's ISP and has MX record indicating the mail server's public IP
address.

thanks in advance
Jeff

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: mail and PIX

2000-12-19 Thread Russell Lusignan

If the exchange server is on the inside, have you created a static NAT
translation from the private => public IP address on the PIX?

If so make sure you have an access-list permitting smtp traffic to the
public address.. let us know if you have done that already

Hope that helps
Russ..


""Jeff Frontera"" <[EMAIL PROTECTED]> wrote in message
000201c06973$21839180$[EMAIL PROTECTED]">news:000201c06973$21839180$[EMAIL PROTECTED]...
> I've recently installed a (2) interface PIX 515...everything seems to be
> fine except that remote users can no longer retrieve their email.  My
client
> has only one exchange server set up on the inside network.  All local
inside
> users can send and receive mail with no problem.  The DNS is maintained by
> the client's ISP and has MX record indicating the mail server's public IP
> address.
>
> thanks in advance
> Jeff
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]