Solved

Cisco ASA drops email (SMTP) from some domains

Posted on 2010-11-11
2
1,312 Views
Last Modified: 2012-05-10
We are missing some emails from Domains.  I have enclosed the logs for one paticular domain that can not send back to us.


Built inbound TCP connection 14677106 for outside: xxx.xxx.250.xx/59339 (xxx.xxx.250.99/59339) to inside:xxx.x.x.xx/25 (XX.151.25.XX/25)


Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags PSH ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25  flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside

Not sure why some are coming through and others are not.
0
Comment
Question by:Tech_guy
2 Comments
 
LVL 20

Accepted Solution

by:
EndureKona earned 250 total points
ID: 34114655
0
 
LVL 76

Assisted Solution

by:Alan Hardisty
Alan Hardisty earned 250 total points
ID: 34116702
The CISCO ASA will have ESMTP Inspect / Inspect ESMTP (equivalent of SMTP Fixup) - this is well known to cause mail-flow issues and should be disabled on your ASA device.

If you can't find SMTP Fixup - look for ESMTP Inspect and disable it.
0

Featured Post

Building an interactive eFuture classroom

Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question