Cisco Support Community
Community Member

Mail Essential/DMZ issue

I am having the following problem implementing mail essentials. Users are able to send messages to the mail essentials server but the mail after it has been filters does not send the mail to the Exchange server. If I change the static command so that the public address points directly to the Exchange server is works fine. After talking to the vendor of Mail Essentials they said you should be able to telnet to the Exchange server and we can not. The mail essential server is located on our dmz. The Exchange server is located on the inside interface.

The following is what is configured for inside and dmz and access list.

ip address inside

ip address dmz2

static (inside,dmz2) netmask 0 0

access-list acl_out permit tcp any host eq smtp

access-group acl_out in interface outside

Mail essentials : IP



I have route inside statements for some of my networks pointing to the internal router but do not have one for the network that the inside interface is part of. If I try to add the following route statement he says a route already exists:

route inside

If a perform a sh route is shows the following routes for the address and dmz:

inside 1 CONNECT static

dmz2 1 CONNECT static

Shouldn't the network be pointing to my internal router and not my inside interface on the PIX?

Any help would be greatly appreciated.


Re: Mail Essential/DMZ issue

Everything inside should point at your inside router. That router should then have a gateway of Remember the PIX can’t route, it can only pass traffic on to a router that can so put a route inside 170.20.x.x (170.20.x.x being your inside router directly connected to the PIX). During troubleshooting, open up an access-list for icmp and get ping connectivity, then troubleshoot forward with tcp (smtp). You may need to use the alias command with your mail gateway on the DMZ.

Community Member

Re: Mail Essential/DMZ issue

I didn't see a static in place for the address. Is that your exchange server or your Mail Essentials Server? In any case, what I think you should check is the following:

1) Static & ACL in place for Mail Essentials (ME) server. Ensure the ME server ACL states that it can receive port 25 from anywhere.

2) Static & ACL for Exchange server. Ensure the Exchange server's ACL can only receive port 25 from the ME server.

CreatePlease to create content