Hi Everyone,
I asked this question before, but got no replies, so here goes again...
I need to configure a PIX 501 to allow inbound SMTP connections to an Exchange server. Simple enough, yes, and in fact I've done this before on a PIX 515E without problems. This pix is also setup to nat the internal subnet (172.18.142.x) to the single external IP, and to allow inbound VPN/PPTP connections.
Here are the pertinent excepts from the running config:
> global (outside) 1 interface
> access-list outside_in permit tcp any interface outside eq smtp
> static (inside,outside) tcp interface smtp 172.18.142.254 smtp netmask 255.255.255.255 0 0
> access-group outside_in in interface outside
I've also tried replacing the above access-list with the following, also with no luck:
> access-list outside_in permit tcp any eq smtp interface outside eq smtp
At first when I attempted telneting into the router's external IP on port 25 (from another location), it would connect, but no text appeared, inputs didn't echo, and eventually the connection would drop after 30 seconds or a minute. Now, presumably as a result of my tinkering around with the config, I can't even get telnet to connect on port 25.
Thanks in advance!
I asked this question before, but got no replies, so here goes again...
I need to configure a PIX 501 to allow inbound SMTP connections to an Exchange server. Simple enough, yes, and in fact I've done this before on a PIX 515E without problems. This pix is also setup to nat the internal subnet (172.18.142.x) to the single external IP, and to allow inbound VPN/PPTP connections.
Here are the pertinent excepts from the running config:
> global (outside) 1 interface
> access-list outside_in permit tcp any interface outside eq smtp
> static (inside,outside) tcp interface smtp 172.18.142.254 smtp netmask 255.255.255.255 0 0
> access-group outside_in in interface outside
I've also tried replacing the above access-list with the following, also with no luck:
> access-list outside_in permit tcp any eq smtp interface outside eq smtp
At first when I attempted telneting into the router's external IP on port 25 (from another location), it would connect, but no text appeared, inputs didn't echo, and eventually the connection would drop after 30 seconds or a minute. Now, presumably as a result of my tinkering around with the config, I can't even get telnet to connect on port 25.
Thanks in advance!