PIX and incomming mail

[rnarayana]

Hello ,

I have a pix 506 in the network .But the problem that I am facing is that I am not able to get any incomming mails .SMTP and pop3 ports and opened.

I have created an access-list for the pop3 and applied to the outside interface of the pix.But even then it I am not able to recive any mails that is send from outside the network.

Can any advice on this.

Thanks,

[gfullage]

Do you see any errors messages/deny's in the PIX syslogs when you try and connect? From a PC on the outside of the PIX, can you telnet to the SMTP server's address on port 25 and 110? If you get a connection, it's not a PIX problem. If you open up ICMP traffic thru the PIX, can you ping the mail server? Is the mail servers default gateway pointing to the interface address of the PIX?

Is this an Exchange server, if so, do "no fixup protocol smtp 25".

[agoodwin]

How many legal IP's do you have?

If you have two I would have the external interface of the pix setup with one of them and the other for the smtp email. Create a static between the smtp ip and the exchange server and use nat/global for the rest of the clients.

For inbound smtp email you will need an acl to permit it something like:

access-list inbound permit tcp any host “SMTP IP” eq smtp

access-group inbound in interface outside

cheers

Andy