Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAT outbound SMTP

Ladies and Gents,

I have 3 interfaces in my PIX, Inside, Public and DMZ. I have a host (192.168.1.111) in the DMZ that needs to relay mail to a smart host on the internet. However, the smart host only accepts connections from certain addresses. Public interface's address is one of them. So I've set up an ACL, applied it to the interface.

access-list DMZ_access_in extended permit tcp host 192.168.1.111 eq smtp object-group smarthostcluster eq smtp

access-group DMZ_access_in in interface DMZ

Now I have to NAT/PAT the traffic, since the smart host only accepts connections from the Public interface.

global (Public) 1 interface

nat (DMZ) 1 192.168.1.111 255.255.255.255

However, it still doesn't work. It says connection is refused. So, I wonder if I have missed something. Our main server sends out fine, but the Inside ACL is a lot less restrictive so I really don't know who's at fault, me or the smart host.

Regards

Igs

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: NAT outbound SMTP

access-list DMZ_access_in extended permit tcp host 192.168.1.111 object-group smarthostcluster eq smtp

access-group DMZ_access_in in interface DMZ

Now I have to NAT/PAT the traffic, since the smart host only accepts connections from the Public interface.

global (Public) 1 interface

nat (DMZ) 1 192.168.1.111 255.255.255.255

Try this hope this will work...!

Thanks/Bhisham

3 REPLIES
New Member

Re: NAT outbound SMTP

access-list DMZ_access_in extended permit tcp host 192.168.1.111 object-group smarthostcluster eq smtp

access-group DMZ_access_in in interface DMZ

Now I have to NAT/PAT the traffic, since the smart host only accepts connections from the Public interface.

global (Public) 1 interface

nat (DMZ) 1 192.168.1.111 255.255.255.255

Try this hope this will work...!

Thanks/Bhisham

New Member

Re: NAT outbound SMTP

Bhisham, thank you for your help. Greatly appriciated.

I'll change the line tomorrow, see what happens

New Member

Re: NAT outbound SMTP

It worked.

thank you Bhisham

288
Views
0
Helpful
3
Replies