Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

PIX 515 and e-mail problems

Hi everyone,

We're having problems downloading POP3 mail from our ISP and I'm trying to look at all avenues. It appears that during the retrieval process, there is a timeout and the message fails to download. The only messages we are having problems with, have attachments of type PDF or Excel and larger than 1 Mb. I am working with another vendor on a box that scans all http and pop3 traffic, but they have not been able to reproduce our problem. This box is connected to the fw with a crossover cable and a second nic is connected to a hub with a cat 5 cable. We don't have any connectivity problems--traffic goes in, traffic goes out. I have ruled out the client as an issue, whereas, I've tried two different clients and have the same problem with both.If messages were getting stuck at the fw where would I go to see this? Any suggestions on how the fw might be involved on this problem?

If anyone has any insight, I would appreciate the assistance.

Chris

6 REPLIES
New Member

Re: PIX 515 and e-mail problems

Hello Chris,

It would be very doubtfull that only PDF ans XLS file are restrain

On your PIX, take a look at this command "fixup protocol smtp 25". Some commands of SMTP protocol are not process on the PIX. Not sure what's the fixup for POP3 but it may give you a hint.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/df.htm#1067379

Also your SMTP server may be configured to discard e-mail witch contains attachments larger than 1Mb.

Good luck,

Michael

New Member

Re: PIX 515 and e-mail problems

Thanks for the reply, Michael. I'll take a look at this.

New Member

Re: PIX 515 and e-mail problems

Michael,

I looked at the documentation from the link above, but I guess I'm not sure what I'm looking for....we do have fixup protocol smtp 25, but not sure where to go from there...I haven't seen any info about a fixup for pop3 at this point. We haven't had any problems receiving pop traffic in general, so I'm not sure if that would be the direction to pursue. Would it be possible that a mail message that is being scanned could take a few minutes and trigger some kind of timeout on the fw? And if so, would it then disconnect the session?

New Member

Re: PIX 515 and e-mail problems

Sorry for the delay, I just came back.... is everything ok now?

You may set this command on your PIX: no fixup protocol smtp 25

But be sure your SMTP server can handle unsecure commands from SMTP protocol.

Also check your PIX log's. You may have error similar to

"too many connection" under heavy traffic condition.

Silver

Re: PIX 515 and e-mail problems

Fixup for SMTP has NO EFFECT on POP3 access. This is not you're problem.

Unless you have a high level of interface errors or the pix is CPU bound for some reason, I highly doubt the firewall is your problem.

New Member

Re: PIX 515 and e-mail problems

Thanks for the reply.

167
Views
0
Helpful
6
Replies
CreatePlease to create content