Exchange Server

[tperachio]

We have a Cisco Pix 515 on our network, does anyone have a simple config for setting up an exchange server 5.5 that could be behind the firewall and still send and receive mail over the internet.

 

[yizhar]

HI.

Some basic steps:

* Read:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix

* Select a free registered ip address that is routed to your pix. For example if the pix outside interface is x.x.x.2, the address might be x.x.x.3 but as mentioned it must be routed to your pix by the ISP.
It is recommended not to use the pix own outside interface address, but can be done if you have only a single address.

* Ask your ISP to setup the MX record for your domain to point to that address.

* Make sure that your Exchange server is not open for relay, in the IMC/SMTP configuration.

* Use static and access-list to allow inbound SMTP traffic:
static (inside,outside) x.x.x.3 10.0.0.3
access-list fromoutside permit any host x.x.x.3 eq smtp
access-group fromoutside in interface outside

* Test incoming and outgoing mail.

* If you need more info, please provide more details.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar