troubleshooting Question

Cannot access OWA through Cisco Pix

Avatar of g000se
g000seFlag for United States of America asked on
Email ProtocolsCisco
21 Comments1 Solution1456 ViewsLast Modified:
Hello.

On Saturday 10/27/07, I had updated my Cisco Pix configuration to Restricting SMTP to specific external IP addresses.  I was able to send and receive email through Outlook.  But I cannot access OWA from outside.  So I reverted back to the original settings.

Here is the proposed config from Saturday:

! erase the current access-list
no access-list outside_access_in
! Reapply the initial entries
access-list outside_access_in permit tcp any host 70.143.123.239 eq www
access-list outside_access_in permit tcp any host 70.143.123.241eq www
access-list outside_access_in deny ip any host 70.143.123.242
! allow incoming mail from the two ip ranges
access-list outside_access_in permit tcp 12.153.120.5 255.255.255.248 host MAILSERVER-IP-ADDRESS eq smtp
access-list outside_access_in permit tcp 12.140.5.100 255.255.255.248 host MAILSERVER-IP-ADDRESS eq smtp
! deny all other incoming mail
access-list outside_access_in deny tcp any host MAILSERVER-IP-ADDRESS eq smtp
access-list outside_access_in permit ip any any
! reapply the access-list to the interface
access-group outside_access_in in interface outside

Where would be the OWA entry?  or would it be in the line below?

static (inside,outside) tcp xxxxxx (my note- External IP) smtp xxxxx (my note- Internal IP)  smtp netmask 255.255.255.255 0 0

I also have two smtp servers.  I wonder if I need to make another entry for the second one and similar to the line above.

Thanks.
g000se
ASKER CERTIFIED SOLUTION
grblades

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 21 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 21 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros