?
Solved

Cisco ASA drops email (SMTP) from some domains

Posted on 2010-11-11
2
Medium Priority
?
1,317 Views
Last Modified: 2012-05-10
We are missing some emails from Domains.  I have enclosed the logs for one paticular domain that can not send back to us.


Built inbound TCP connection 14677106 for outside: xxx.xxx.250.xx/59339 (xxx.xxx.250.99/59339) to inside:xxx.x.x.xx/25 (XX.151.25.XX/25)


Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags PSH ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25  flags ACK  on interface outside
Deny TCP (no connection) from xxx.xxx.250.99/59339 to XX.151.25.XX/25 flags ACK  on interface outside

Not sure why some are coming through and others are not.
0
Comment
Question by:Tech_guy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 20

Accepted Solution

by:
EndureKona earned 1000 total points
ID: 34114655
0
 
LVL 76

Assisted Solution

by:Alan Hardisty
Alan Hardisty earned 1000 total points
ID: 34116702
The CISCO ASA will have ESMTP Inspect / Inspect ESMTP (equivalent of SMTP Fixup) - this is well known to cause mail-flow issues and should be disabled on your ASA device.

If you can't find SMTP Fixup - look for ESMTP Inspect and disable it.
0

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
A couple of months ago we ran into an issue that necessitated re-creating our Edge Subscriptions. However, when we attempted to execute the command: New-EdgeSubscription -filename C:\NewEdgeSub_01.xml we received an error indicating that the LDAP se…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question