RE: [Declude.JunkMail] Cisco Pix firewall fixup
no fixup protocol smtp 25 I just looked in our PIX and this is the exact line. Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Terry Parks > Sent: Thursday, June 26, 2003 12:40 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Cisco Pix firewall fixup > > > OK, What's the command to do this? > > Terry > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Rifat Levis > Sent: Thursday, June 26, 2003 12:12 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Cisco Pix firewall fixup > > Terry , just disable the fixup protocol for smtp > > And all your problems will be over . > > Rifat > > > > - Original Message - > From: "Terry Parks" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, June 26, 2003 10:03 PM > Subject: RE: [Declude.JunkMail] Cisco Pix firewall fixup > > > Terry here, > Now I am lost...should the fix-up protocol be used or not? If > not, how is it > turned off? > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Rifat Levis > Sent: Thursday, June 26, 2003 11:41 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Cisco Pix firewall fixup > > > I have talked to cisco people in Cebit Hannover about the PIX problem > > Rifat : The Fix-up protocol does not support ESMTP , my clients need to > use SMTP Authentication. > > Cisco Tech Guy : Just use the Vpn client to get the client to > local subnet. > > Rifat : My clients PIX is a cheaper model it does not support VPN > > Cisco Tech Guy : We just released a IPSEC pack just dowload it > from the web > site. > > Result : As a company which have the biggest sale volume in our country of > cisco routers, we are using Netscreen firewall. > > Fact : Pix router is not a real cisco product , it is a product > added to the > list after the acquisition of a security company. > > Regards > > Rifat Levis > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by SURFSIDE INTERNET] > > --- > [This E-mail scanned for viruses by SURFSIDE INTERNET] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by SURFSIDE INTERNET] > > --- > [This E-mail scanned for viruses by SURFSIDE INTERNET] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Cisco Pix firewall fixup
OK, What's the command to do this? Terry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rifat Levis Sent: Thursday, June 26, 2003 12:12 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Cisco Pix firewall fixup Terry , just disable the fixup protocol for smtp And all your problems will be over . Rifat - Original Message - From: "Terry Parks" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 26, 2003 10:03 PM Subject: RE: [Declude.JunkMail] Cisco Pix firewall fixup Terry here, Now I am lost...should the fix-up protocol be used or not? If not, how is it turned off? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rifat Levis Sent: Thursday, June 26, 2003 11:41 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Cisco Pix firewall fixup I have talked to cisco people in Cebit Hannover about the PIX problem Rifat : The Fix-up protocol does not support ESMTP , my clients need to use SMTP Authentication. Cisco Tech Guy : Just use the Vpn client to get the client to local subnet. Rifat : My clients PIX is a cheaper model it does not support VPN Cisco Tech Guy : We just released a IPSEC pack just dowload it from the web site. Result : As a company which have the biggest sale volume in our country of cisco routers, we are using Netscreen firewall. Fact : Pix router is not a real cisco product , it is a product added to the list after the acquisition of a security company. Regards Rifat Levis --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Cisco Pix firewall fixup
Terry , just disable the fixup protocol for smtp And all your problems will be over . Rifat - Original Message - From: "Terry Parks" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 26, 2003 10:03 PM Subject: RE: [Declude.JunkMail] Cisco Pix firewall fixup Terry here, Now I am lost...should the fix-up protocol be used or not? If not, how is it turned off? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rifat Levis Sent: Thursday, June 26, 2003 11:41 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Cisco Pix firewall fixup I have talked to cisco people in Cebit Hannover about the PIX problem Rifat : The Fix-up protocol does not support ESMTP , my clients need to use SMTP Authentication. Cisco Tech Guy : Just use the Vpn client to get the client to local subnet. Rifat : My clients PIX is a cheaper model it does not support VPN Cisco Tech Guy : We just released a IPSEC pack just dowload it from the web site. Result : As a company which have the biggest sale volume in our country of cisco routers, we are using Netscreen firewall. Fact : Pix router is not a real cisco product , it is a product added to the list after the acquisition of a security company. Regards Rifat Levis --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Cisco Pix firewall fixup
Terry here, Now I am lost...should the fix-up protocol be used or not? If not, how is it turned off? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rifat Levis Sent: Thursday, June 26, 2003 11:41 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Cisco Pix firewall fixup I have talked to cisco people in Cebit Hannover about the PIX problem Rifat : The Fix-up protocol does not support ESMTP , my clients need to use SMTP Authentication. Cisco Tech Guy : Just use the Vpn client to get the client to local subnet. Rifat : My clients PIX is a cheaper model it does not support VPN Cisco Tech Guy : We just released a IPSEC pack just dowload it from the web site. Result : As a company which have the biggest sale volume in our country of cisco routers, we are using Netscreen firewall. Fact : Pix router is not a real cisco product , it is a product added to the list after the acquisition of a security company. Regards Rifat Levis --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail scanned for viruses by SURFSIDE INTERNET] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Cisco Pix firewall fixup
But just because your Cisco "tech" guy doesn't know anything about the application-level effects of the Cisco fixup features doesn't mean there's anything wrong or "unreal" about the PIX as a firewall, as long as you eliminate the fixup problem. If neither you nor the tech thought or wondered about turning off fixup, which is very well documented, that's no fault of the product itself (though I can understand the desire for vengeance at a vendor rep who didn't know his stuff). The PIX is a highly resilient enterprise firewall. Like other products that dabble in application proxying (WatchGuard, etc.), its proxy functions are not as well thought out. -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
