Incoming emails getting blocked behind PIX

Well a few things need to be checked,

1) Did you ensure that the MX record for your domain has been registered with whoever runs your county DNS pointing to the Public IP of your Exchange server?

2) Did you ensure Port 25 incoming is open for incoming emails to the mail server Public IP address on the PIX firewall.

If this is done, then PIX doesnot need any further configuration

InfoSec Dude
Somewhere in the UAE

--
Information Security Dude,
CISSP, CISA, CWNA, ISMS LA
Somewhere in UAE.

Messages in this topic (2) Reply (via web post) | Start a new topic

.

Hi there,

I'm also having the same issue w/ the same application
(Exchange 2003).
Please, just let me know if the port 25 should be
declared as "permit" on the ACL.
Moreover, when I use public IP (200.x.x.x) it works
somehow. But when I use a private IP (192.x.x.x) it
doesn't. I can explain this problem of course with
more details if it needs.

Thanks a lot!

Romulo Sousa


--- Information Security Human < dudeinfosec%40gmail.com">dudeinfosecgmail.com>
wrote:

> Well a few things need to be checked,
>
> 1) Did you ensure that the MX record for your domain
&gt; has been registered
> with whoever runs your county DNS pointing to the
> Public IP of your Exchange
> server?

> 2) Did you ensure Port 25 incoming is open for
> incoming emails to the mail
> server Public IP address on the PIX firewall.
>
> If this is done, then PIX doesnot need any further
&gt; configuration
>
> InfoSec Dude
> Somewhere in the UAE
>
> On 12/17/06, anand_b_patil
> < anand_b_patil%40hotmail.com">anand_b_patilhotmail.com> wrote:
&gt; >
> > Hi,
> >
> > I'm trying to setup an Exchange Server 2003 behind
&gt; my PIX506E firewall.
> > I can se that all the outgoing emails can go but
> incoming emails are
> > not reaching the exchange server. I have created
&gt; the host and MX
> > records for the intended public IP. I have created
&gt; a simple NAT rule
> > using the PDM. I'm not sure if I need to open any
> ports like 25
> > specifically. When we send an email to the new
> intended ID, the error
>; > message says the email delivery has been delayed
&gt; and shows the public
&gt; > IP of the Exchange server.
&gt; >
> > If anyone has any idea, please help.
>; >
> > - Thanks.
&gt; >
> >
> >
>
>
>
> --
> Information Security Dude,
>; CISSP, CISA, CWNA, ISMS LA
> Somewhere in UAE.
>

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

Messages in this topic (3) Reply (via web post) | Start a new topic

.

You might want to make sure SMTP fixup is not running in the config.

I've had lots of issues with it and most times remove the command. (no
fixup smtp)

--- In PIX_Firewall%40yahoogroups.com">PIX_Firewallyahoogroups.com, Romulo Sousa <romulo_sousa...>
wrote:
>;
> Hi there,
&gt;
> I'm also having the same issue w/ the same application
> (Exchange 2003).
&gt; Please, just let me know if the port 25 should be
> declared as "permit" on the ACL.
> Moreover, when I use public IP (200.x.x.x) it works
>; somehow. But when I use a private IP (192.x.x.x) it
> doesn't. I can explain this problem of course with
> more details if it needs.
&gt;
> Thanks a lot!
>
> Romulo Sousa
>;
>
> --- Information Security Human <dudeinfosec...>
> wrote:
&gt;
> > Well a few things need to be checked,
> >
> > 1) Did you ensure that the MX record for your domain
&gt; > has been registered
> > with whoever runs your county DNS pointing to the
> > Public IP of your Exchange
> > server?
&gt;
>
> > 2) Did you ensure Port 25 incoming is open for
> > incoming emails to the mail
> > server Public IP address on the PIX firewall.
> >
> > If this is done, then PIX doesnot need any further
&gt; > configuration
> >
> > InfoSec Dude
> > Somewhere in the UAE
> >
> > On 12/17/06, anand_b_patil
> > <anand_b_patil...> wrote:
&gt; > >
> > > Hi,
> > >
> > > I'm trying to setup an Exchange Server 2003 behind
&gt; > my PIX506E firewall.
> > > I can se that all the outgoing emails can go but
> > incoming emails are
> > > not reaching the exchange server. I have created
&gt; > the host and MX
> > > records for the intended public IP. I have created
&gt; > a simple NAT rule
> > > using the PDM. I'm not sure if I need to open any
> > ports like 25
> > > specifically. When we send an email to the new
> > intended ID, the error
>; > > message says the email delivery has been delayed
&gt; > and shows the public
&gt; > > IP of the Exchange server.
&gt; > >
> > > If anyone has any idea, please help.
>; > >
> > > - Thanks.
&gt; > >
> > >
> > >
> >
> >
> >
> > --
> > Information Security Dude,
>; > CISSP, CISA, CWNA, ISMS LA
> > Somewhere in UAE.
> >
>
>
> __________________________________________________
> Do You Yahoo!?
&gt; Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>

Messages in this topic (5) Reply (via web post) | Start a new topic

.