[SOLVED] Problem forwarding port 25 to Mail server (through router & pix)

saintpi · 09-08-2009, 09:19 AM

I have a Mail Server behind Firewall. With an ipcop firewall connected and port 25 forwarded to the mail server ip, the exchange server works perfectly.
Now I have a combination of Cisco router and PIX. I cannot seem to be able to configure the pix and router to allow smtp traffic to the mail server. HELP!

Details

Internet -->Cisco 3700 --> Pix 515E --> Mail Server

What do I do to get the router and the pix to forward port 25 to the Mail Server.

Thanks

Suncoast · 09-09-2009, 10:08 AM

This is a super basic question, and PIX firewalls require moderate networking and Cisco CL knowledge. So I have to wonder if this is someones test question?

saintpi · 09-10-2009, 06:02 AM

It may sound basic but I am yet to find a solution even from CCNPs & other senior professionals. Study the question again and see if you can proffer a solution that works. Thanks.

**koala** · 09-10-2009, 06:44 AM

I think Suncoast is asking if your question is related to a real-life problem you're having or if it's from a test paper, as these are the kind of questions found in tech exams.

saintpi · 09-11-2009, 08:14 AM

It's a real life situation.. The ips are not exactly what I have on my network though...

Suncoast · 09-11-2009, 09:20 AM

First I would make sure the 3700 knows about network 10
sh ip route 10.10.11.80

Then I would ping 10.10.11.80 from the 3700.

Then I would telnet from the 3700 using port 25.
telnet 201.13.12.102 25 source-interface 201.13.12.102
and
telnet 10.10.11.80 25 source-interface 192.168.6.2

If the first one works, the ISP is blocking port 25.
If the first fails, and second works, then your static nat is wrong.
Check your nat table (sh ip nat tran)
If they both fail, but ping and route are ok, your problem is in the PIX

saintpi · 09-22-2009, 10:35 AM

Problem solved. Thanks to information I got from Firewall.cx forum.
http://www.firewall.cx/ftopict-5821.html
Exchange server can send and receive mails.

Suncoast · 09-23-2009, 09:03 AM

In all fairness to TSF, you would have received an answer here as well if you had posted your progress with the suggested troubleshooting steps.

My Wife likes to tell the story that my first question when I used to do tech support was "Is it plugged in?"

09-08-2009, 09:19 AM	#1 (permalink)
saintpi Registered User Join Date: Sep 2009 Posts: 5 OS: Vista Home Premium	[SOLVED] Problem forwarding port 25 to Mail server (through router & pix) I have a Mail Server behind Firewall. With an ipcop firewall connected and port 25 forwarded to the mail server ip, the exchange server works perfectly. Now I have a combination of Cisco router and PIX. I cannot seem to be able to configure the pix and router to allow smtp traffic to the mail server. HELP! Details Internet -->Cisco 3700 --> Pix 515E --> Mail Server What do I do to get the router and the pix to forward port 25 to the Mail Server. Thanks

09-09-2009, 10:08 AM	#2 (permalink)
Suncoast Registered User Join Date: Jul 2009 Location: Largo, FL, USA Posts: 389 OS: XPP, Linux, 2003, Cisco	Re: Problem forwarding port 25 to Mail server (through router & pix) This is a super basic question, and PIX firewalls require moderate networking and Cisco CL knowledge. So I have to wonder if this is someones test question?

09-10-2009, 06:02 AM	#3 (permalink)
saintpi Registered User Join Date: Sep 2009 Posts: 5 OS: Vista Home Premium	Re: Problem forwarding port 25 to Mail server (through router & pix) It may sound basic but I am yet to find a solution even from CCNPs & other senior professionals. Study the question again and see if you can proffer a solution that works. Thanks.

09-10-2009, 06:44 AM	#4 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 12,299 OS: XP/7/Ubuntu My System	Re: Problem forwarding port 25 to Mail server (through router & pix) I think Suncoast is asking if your question is related to a real-life problem you're having or if it's from a test paper, as these are the kind of questions found in tech exams. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here

09-11-2009, 08:14 AM	#5 (permalink)
saintpi Registered User Join Date: Sep 2009 Posts: 5 OS: Vista Home Premium	Re: Problem forwarding port 25 to Mail server (through router & pix) It's a real life situation.. The ips are not exactly what I have on my network though...

09-11-2009, 09:20 AM	#6 (permalink)
Suncoast Registered User Join Date: Jul 2009 Location: Largo, FL, USA Posts: 389 OS: XPP, Linux, 2003, Cisco	Re: Problem forwarding port 25 to Mail server (through router & pix) First I would make sure the 3700 knows about network 10 sh ip route 10.10.11.80 Then I would ping 10.10.11.80 from the 3700. Then I would telnet from the 3700 using port 25. telnet 201.13.12.102 25 source-interface 201.13.12.102 and telnet 10.10.11.80 25 source-interface 192.168.6.2 If the first one works, the ISP is blocking port 25. If the first fails, and second works, then your static nat is wrong. Check your nat table (sh ip nat tran) If they both fail, but ping and route are ok, your problem is in the PIX Last edited by Suncoast; 09-11-2009 at 09:22 AM. Reason: ip correction

09-22-2009, 10:35 AM	#7 (permalink)
saintpi Registered User Join Date: Sep 2009 Posts: 5 OS: Vista Home Premium	Re: Problem forwarding port 25 to Mail server (through router & pix) Problem solved. Thanks to information I got from Firewall.cx forum. http://www.firewall.cx/ftopict-5821.html Exchange server can send and receive mails.

09-23-2009, 09:03 AM	#8 (permalink)
Suncoast Registered User Join Date: Jul 2009 Location: Largo, FL, USA Posts: 389 OS: XPP, Linux, 2003, Cisco	Re: [SOLVED] Problem forwarding port 25 to Mail server (through router & pix) In all fairness to TSF, you would have received an answer here as well if you had posted your progress with the suggested troubleshooting steps. My Wife likes to tell the story that my first question when I used to do tech support was "Is it plugged in?"