I have our PIX configured to be completely open on all interfaces. (at least that's what i believe) All traffic works as it should. I have a server that acts as both a web server and an email server in the test environment on the inside subnet (10.0.0.100 Test-Server). The web portion works fine but I am having trouble with mail portion. If I telnet to port 25, instead of seeing correct output like:
220 server.domain.com Microsoft ESMTP MAIL Service, version: 5.0.2195.2966 ready at Mon, 6 Oct 2003 13:39:26 -0500
the output I get is:
220 *********************************0*2*00*****************************************200********************0.00
However, when I telnet to it without going through the Pix, the output is as it should be.
Has anyone seen this? I am baffled. I am new to the Pix so it is very possible I am somehow incorrectly configured.
The PIX is configured as follows:
PIX Version 6.2(3)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security10
names
name 10.0.0.100 Test-Server
access-list dmz-in permit icmp any any
access-list dmz-in permit ip any any
access-list inside-in permit icmp any any
access-list inside-in permit ip any any
access-list inside-no-nat permit ip 10.0.0.0 255.0.0.0 192.168.0.0 255.240.0.0
access-list dmz-no-nat permit ip 192.168.0.0 255.240.0.0 10.0.0.0 255.0.0.0
access-list out-in permit icmp any any
access-list out-in permit ip any any
ip address outside 222.222.222.222 255.255.255.0
ip address inside 10.0.0.1 255.0.0.0
ip address dmz 192.168.0.1 255.240.0.0
global (outside) 1 222.222.222.254
nat (inside) 0 access-list inside-no-nat
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (dmz) 0 access-list dmz-no-nat
nat (dmz) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 222.222.222.100 Test-Server netmask 255.255.255.255 0 0
access-group out-in in interface outside
access-group inside-in in interface inside
access-group dmz-in in interface dmz
220 server.domain.com Microsoft ESMTP MAIL Service, version: 5.0.2195.2966 ready at Mon, 6 Oct 2003 13:39:26 -0500
the output I get is:
220 *********************************0*2*00*****************************************200********************0.00
However, when I telnet to it without going through the Pix, the output is as it should be.
Has anyone seen this? I am baffled. I am new to the Pix so it is very possible I am somehow incorrectly configured.
The PIX is configured as follows:
PIX Version 6.2(3)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security10
names
name 10.0.0.100 Test-Server
access-list dmz-in permit icmp any any
access-list dmz-in permit ip any any
access-list inside-in permit icmp any any
access-list inside-in permit ip any any
access-list inside-no-nat permit ip 10.0.0.0 255.0.0.0 192.168.0.0 255.240.0.0
access-list dmz-no-nat permit ip 192.168.0.0 255.240.0.0 10.0.0.0 255.0.0.0
access-list out-in permit icmp any any
access-list out-in permit ip any any
ip address outside 222.222.222.222 255.255.255.0
ip address inside 10.0.0.1 255.0.0.0
ip address dmz 192.168.0.1 255.240.0.0
global (outside) 1 222.222.222.254
nat (inside) 0 access-list inside-no-nat
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (dmz) 0 access-list dmz-no-nat
nat (dmz) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 222.222.222.100 Test-Server netmask 255.255.255.255 0 0
access-group out-in in interface outside
access-group inside-in in interface inside
access-group dmz-in in interface dmz
