06-17-2008 06:13 AM - edited 03-11-2019 06:00 AM
As of last Friday, we can not recieve email from one company (that we know of). I don't remember making any changes to the firewall except adding pptp to the inpection list. I have removed ESMTP from the inspection list and still can't recieve their email.
This is what I see in my logs:
Jun 16 2008 13:55:48: %ASA-6-302013: Built inbound TCP connection 1969454 for Outside:70.98.248.217/11877 (70.98.248.217/11877) to DMZ:SpamFW/25
generic_num=6, specificTrap_num=1, specificTrap_name=, clogHistFacility.0=20, clogHistSeverity.0=7, clogHistMsgName.0="Syslog Trap", clogHistMsgText.0="<166>Jun 16 2008 13:55:48: %ASA-6-302013: Built inbound TCP connection 1969454 for Outside:70.98.248.217/11877 (70.98.248.217/11877) to DMZ:SpamFW/25 (66.193.105.213/25)", clogHistTimestamp.0=69394600
Jun 16 2008 13:55:48: %ASA-6-302014: Teardown TCP connection 1969454 for Outside:70.98.248.217/11877 to DMZ:SpamFW/25 duration 0:00:00 bytes 0 TCP Reset-O
generic_num=6, specificTrap_num=1, specificTrap_name=, clogHistFacility.0=20, clogHistSeverity.0=7, clogHistMsgName.0="Syslog Trap", clogHistMsgText.0="<166>Jun 16 2008 13:55:48: %ASA-6-302014: Teardown TCP connection 1969454 for Outside:70.98.248.217/11877 to DMZ:SpamFW/25 duration 0:00:00 bytes 0 TCP Reset-O", clogHistTimestamp.0=69394600
Any help would be appreciated,
Thanks
Shawn
06-17-2008 11:24 AM
Are you sure this is an issue with the firewall?
It seems your anti-spam software is resetting connections from mail server 70.98.248.217, perhaps this host exists is in its Black list or something?
Regards
Farrukh
06-18-2008 06:25 AM
Thanks for your reply, but it ended up being a problem with the sender. They did not tell me they were having other mail related issues and just decided to blame us. The 70.98.248.217 address was their sending mail host, and it would send an immediate reset after establishing the connection.
06-18-2008 06:30 AM
Ahh OK, thanks for the update :)
Regards
Farrukh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide