Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

SMTP/POP not working through PIX VPN connection.

We are using a PIX501 with a default configuration, with a few VPN accounts setup as well.

When users connect through VPN, using the Cisco VPN client with the AES-256 transform set (if that makes a difference), IMAP works (port 143), secure IMAP works (port 993), SSH works (port 22) but SMTP (port 25) and POP3 (110) do not work.

All of the above services are running on the same machine, which happily accepts connections from anywhere regardless of IP address.

Also note that when we are connected through the VPN, we get an IP address in the same subnet as the machine we are trying to connect to. This has been confirmed by connecting successfully to port 80, and then looking at the apache logs.

We have tried disabling the default smtp fixup line in the config, but the problems still remain.

Any suggestions are very much appreciated!

Thanks,

Richard.

5 REPLIES
Gold

Re: SMTP/POP not working through PIX VPN connection.

just wondering if all these protocols, including imap, secure imap, ssh, smtp, and pop3 are only avaliable via vpn. or few of them are available from the internet directly with static nat/pat configured on the pix.

maybe post the config.

New Member

Re: SMTP/POP not working through PIX VPN connection.

they are only available via vpn, and this is the way they should be.

Gold

Re: SMTP/POP not working through PIX VPN connection.

the issue maybe either related to the nat/pat or outbound acl.

please post the config.

New Member

Re: SMTP/POP not working through PIX VPN connection.

i'd rather not post the entire config from our company firewall if that's ok... are there any particular settings you need to see?

Gold

Re: SMTP/POP not working through PIX VPN connection.

it should be fine if you masked all the public ip info. if it's not feasible, please post the part with nat/pat/global/static and acls.

199
Views
0
Helpful
5
Replies