Sorry for the big delay, here you go:
For PIX Version 6.3(3):
(note, I am using secure POP3)
interface ethernet0 auto
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xxx encrypted
passwd xxx encrypted
hostname pixfirewall...
Well we are not that far apart in our regulatory. I need to consider banking as well since we have a bank charter, state insurance department regulatory, plus we are public so Sarbanes-Oxley and SEC rules apply.
The question is, if you home brew a solution, does that pass your auditors? And...
I just started a similar project for our company. I assume this is for Sarbanes-Oxley/SEC compliance. Maybe we can collaborate and come up with a compliant solution that does not cost an arm and a leg. The challenges are that the sys admins have to be able to show that they cannot tamper with...
Thanks for all of your help. I am able to get the Outlook client to pull down mail now. I did two things:
1. did the no fix up on smtp port 25
2. added some ICMP echo statements
I will look at your latest recommendation to see if that further stabilizes the config.
I did:
no fixup protocol smtp 25
and then telnet to port 25 and the banner says ESMTP.
Good call! However, the Outlook client is still returning the same error. One interesting thing I discovered is that I can only telnet to port 25 using the IP address. But if I do an nslookup...
Also, I did testing inside the same subnet and the mail download is successful. So my conclusion is that it's not sendmail related. The only other variables are the Outlook config and the PIX.
Hi,
I have a web server and a sendmail/pop3s based email server behind a PIX 501 with one external IP. I have a problem with the email server. When a user tries to download theiremail using Outlook, the pop3s server cannot be reached.They can send outbound email just fine. I have the Outlook...
Hi, I am fairly new to the Pix 501 and I am configuring
a basic network with one outside public IP and 2 public servers behind the PIX (Email and web). My problem is, the email is working great except the Outlook clients outside my network cannot reach the server to download mail. They can...
maybe I am missing something here Real Shadow.
>> Need either static/dymamic for outside interface
>> You have the same ip address x.x.6.1 for both outside & >> next hop
>> ...
>> ip address outside x.x.6.1 255.255.255.0
>> ip address inside 192.168.1.1 255.255.255.0
>> .....
>> route outside...
I could not ping the ISPs router from the pix , so I changed ip address outside to this:
ip address outside 208.30.6.1 255.255.255.0
And now I get a successful ping reply. But I cannot ping beyond the router. I have another working network and I can ping beyond the same router from there, so...
Executed:
ip address outside x.x.x.38 255.255.255.0
route outside 0.0.0.0 0.0.0.0 x.x.6.1
sho ip
System IP Addresses:
ip address outside x.x.x.38 255.255.255.0
ip address inside 192.168.1.1 255.255.255.0
Current IP Addresses:
ip address outside x.x.x.38 255.255.255.0...
Inside and outside are up. I changed between full duplex and half duplex. No change in problem. The outside router is owned by an ISP. I don't know if there is a DHCP server there. How would I configure the outside with a static IP?
Current status:
sho int...
Thanks for the rapid assistance:
> sh ip
System IP Addresses:
no ip address outside
ip address inside 192.168.1.1 255.255.255.0
Current IP Addresses:
no ip address outside
ip address inside 192.168.1.1 255.255.255.0
sho route
inside 192.168.1.0...
Hi,
I am a newbie to the PIX 501 and could use some help with my configuration. (licensed for unlimited users). Goal is to have a PC network using DHCP and a public email and http server. DNS is served from FreeDNS. Connected one PC to port 1 to test and the DHCP server on the PIX is serving...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.