Click to See Complete Forum and Search --> : PIX Issues


silencio
April 27th, 2002, 05:56 AM
Here's the problem. My dmz mail server can't stay connected to my internal mail server. I connect to port 25 on the internal mail server from the dmz. I get a connection and type my helo x.com I get a reply 250 tc0mail.cluster.lab Hello 172.16.10.200

I type a mail from: and it dies. I'm guessing the problem is with the PIX config but I could be wrong. Connecting to the internal server works fine from within the internal network. When ICMP is opened up I can ping/trace into the DMZ with no problem and ping back to the internal from the dmz with no problems but the trace is weird. It says:

1 10MS 192.168.1.90
2 10MS 192.168.1.90

when it should be
1 xx 172.16.10.1
2 xx 192.168.2.2
3 xx 192.168.1.1
4 xx 192.168.1.90

Here are the network configs. Like I said, I don't suspect an exchange config error because all works from inside the network and relaying/access is wide open (for testing).

I'm going to bed, you guys can chew on this for awhile <img border="0" title="" alt="[Wink]" src="wink.gif" />

Update. It's a routing problem. I'll let you know when I figure it out.

silencio
April 28th, 2002, 01:26 AM
It wasn't a routing problem. It was Cisco's smtp fixup protocol. <a href="http://support.bb4.com/archive/200202/msg00894.html" target="_blank">http://support.bb4.com/archive/200202/msg00894.html</a>

It only took two days to figure out.