Solved

Cisco ASA drops email (SMTP) from some domains

Posted on 2010-11-11
2
1,314 Views
Last Modified: 2012-05-10
We are missing some emails from Domains.  I have enclosed the logs for one paticular domain that can not send back to us.


Built inbound TCP connection 14677106 for outside: xxx.xxx.250.xx/59339 (xxx.xxx.250.99/59339) to inside:xxx.x.x.xx/25 (XX.151.25.XX/25)


Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags PSH ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25  flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside

Not sure why some are coming through and others are not.
0
Comment
Question by:Tech_guy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 20

Accepted Solution

by:
EndureKona earned 250 total points
ID: 34114655
0
 
LVL 76

Assisted Solution

by:Alan Hardisty
Alan Hardisty earned 250 total points
ID: 34116702
The CISCO ASA will have ESMTP Inspect / Inspect ESMTP (equivalent of SMTP Fixup) - this is well known to cause mail-flow issues and should be disabled on your ASA device.

If you can't find SMTP Fixup - look for ESMTP Inspect and disable it.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data‚Ķ
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates‚Ķ

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question