Stumped - PIX515 Rules for SMTP (and others) not working

[DKIAdmin]

Hello! I am stumped. I have looked through a few threads here but I *think* my config is correct.. but clearly not since I am unable to establish a telnet connection to my Exchange server through the PIX.

If someone could check my work to see what I missed, I would appreciate it!


PIX Version 6.3(5)145
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto shutdown
interface ethernet3 auto shutdown
interface ethernet4 auto shutdown
interface ethernet5 auto shutdown
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 intf2 security4
nameif ethernet3 intf3 security6
nameif ethernet4 intf4 security8
nameif ethernet5 intf5 security10
enable password xxx encrypted
passwd xxx encrypted
hostname FW
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
no fixup protocol sip 5060
no fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
no names
name 10.1.100.12 NT-EX01
name 10.1.100.17 NT-DEV-GM3
name 10.1.100.45 NT-DEV-CF9
access-list INBOUND permit tcp any host xxx.xxx.xxx.43 eq https
access-list INBOUND permit tcp any host xxx.xxx.xxx.43 eq www
access-list INBOUND permit tcp any host xxx.xxx.xxx.43 eq smtp
pager lines 40
icmp deny any echo-reply outside
icmp deny any outside
mtu outside 1500
mtu inside 1500
mtu intf2 1500
mtu intf3 1500
mtu intf4 1500
mtu intf5 1500
ip address outside xxx.xxx.xxx.43 255.255.255.248
ip address inside 10.1.100.254 255.255.0.0
no ip address intf2
no ip address intf3
no ip address intf4
no ip address intf5
ip audit info action alarm
ip audit attack action alarm
no failover
failover timeout 0:00:00
failover poll 15
no failover ip address outside
no failover ip address inside
no failover ip address intf2
no failover ip address intf3
no failover ip address intf4
no failover ip address intf5
no pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp xxx.xxx.xxx.43 https 10.1.100.12 https netmask 255.255.255.255 0 0
static (inside,outside) tcp xxx.xxx.xxx.43

http://www 10.1.100.45

http://www netmask

255.255.255.255 0 0
static (inside,outside) tcp xxx.xxx.xxx.43 smtp 10.1.100.12 smtp netmask 255.255.255.255 0 0
access-group INBOUND in interface outside
route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.41 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:00:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
aaa authentication ssh console LOCAL
http 10.1.0.0 255.255.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet timeout 5
ssh 10.1.0.0 255.255.0.0 inside
ssh timeout 60
console timeout 0
username <snip>
terminal width 80
Cryptochecksum:1f3c61938e1308f25cd4d140be2e04a7
: end