POP3 mail and PIX

[tauseef]

Hi All,

I have a mail server on my LAN , PIX on the outside, and then the ROUTER and then the rest of the WORLD :).

The users can access Mail , send and receive mail , but when they try to log on to the mail server from their house Using outlook express, it says cannot connect to server,but surprisingly it can Ping the Public IP of the mail server from outside ...??

I am using access list and for the mail server have given as ...

access-list aclout permit tcp any host <public IP> eq smtp

also given

access-list aclout permit tcp any host <public IP> eq pop3

but nope .... any clues ....any one hearing ...

thanx in advance !

bye .

Tauseef

tauseef@cadgulf.com

[paland]

When you say "when they try to log on to the mail server" are you talking login through smtp or pop3?

If smtp try turning off the smtp fixup as it doesn't allow the esmtp commands through (at least it didn't use to).

[paland]

sorry to re-reply.

You might also try telnetting to the mailserver on ports 110 and 25 and seeing if you can connect.

[exigent]

You have to use the private (LAN) IP address of the host not the public. You should have previously defined the one-to-one static mapping between the public and private IP in a STATIC statement.

Also, the original posting did not include that you meant Public IP. I think it is because it was between "< >" signs so maybe the web browser thought it was HTML code. I guess it's a question for Cisco's web masters.

Sincerely,

Alex Zaltsman

[elehman]

Do you guys look at the TAC center or what? Please look at http://www.cisco.com/warp/public/110/mailserver_in.html. you need to have a static as well as an ACL, or a conduit opening pop3 and smtp INBOUND. It looks from above that you have it enabled outbound only.

For example:

access-list smtp permit tcp any host 209.164.3.5 eq smtp

static (inside,outside) 209.164.3.5 192.168.2.57 netmask 255.255.255.255

access-group smtp in interface outside