Port Forwarding Question - Cisco Pix Firewall

Posted on 2005-04-21
Last Modified: 2013-11-16
We have a Cisco Pix Firewall v 6.1(4) that is fully configured and operational. E-mail comes in and goes to our Exchange server ( Http requests come in and go to Exchange also for Outlook Web Access. We purchased a Barracuda spam firewall ( and are trying to change the internal ip that smtp goes to while leaving Http requests as is.

I have tried various settings and cannot get this to work. Here are some of the lines from the original configuration.

access-list acl_inbound permit tcp any host eq smtp
access-list acl_inbound permit tcp any host eq http
alias (inside)
static (inside,outside) netmask 0 0

I removed the alias and static lines and added this line:

static (inside,outside) tcp smtp smtp netmask 0 0

I saved the configuration (I think?) "write terminal" and then "write memory" yet mail still goes to

Nowhere in the config does show up yet somehow the smtp packets still go there. How do I fix this to do what I want?

Thanks for the help.

Question by:amkbailey
    LVL 79

    Accepted Solution

    See if this is what you did:

    no static (inside,outside) netmask 0 0
    no alias (inside)
    clear xlate
    static (inside,outside) tcp smtp smtp dns netmask
    static (inside,outside) tcp https https dns netmask

    If your v 6.1(4) chokes on the "dns" entry of the static above, then just don't put it in. This is the "new" version of "alias" command on 6.3(x). Highly suggest you upgrade to latest 6.3(4) and latest 3.02 PDM versions.


    Author Comment


    It was the clear xlate command that did the trick.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now