PIX config problem?

[bdssbrd]

I have our servers configured on the inside of the PIX with static maps pointing at public addresses. We are having a problem with our IIS server not being able to send SMTP mail to our Excange server. We can receive mail fine from outside sources. The IIS server can also send mail fine to outside sources. We just have a problem when we try to send mail to our own address. Is there a setting I need to make in the PIX to allow this. Any helpwould be greatly appreciated.

Thanks

 

[baddos]

You need to enable an access-list or a conduit list to allow smtp to flow inbound.

I.E.

access-list 101 permit tcp any host xxx.xxx.xxx.xxx eq 25
access-group 101 in interface outside

Replace the xxx.xxx.xxx.xxx with the ip of the email server.

 

[bdssbrd]

That is already done. We can receive e-mail fine from outside sources. We just have a problem getting mailfrom out own IIS server.

 

[baddos]

Are you using NAT?

 

[bdssbrd]

Yes we are using NAT, and we are also using static address mappings to public addresses.

 

[baddos]

Is the IIS server trying to connect to your mail server's public IP? If so, try having it connect to it's real private IP.