Receiving Duplicate Inbound SMTP Messages (Q295725)
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q295725
SMTP
====
The fixup smtp command inspects SMTP session and performs three primary
tasks:
(i) enforce the seven generic commands;
(ii) track SMTP command-response sequence;
(iii) generate audit trail.
The port number defines the well known service port where the
SMTP client initiated to connect to the SMTP server. This port is
usually 25. However, a different and non-standard can be
specified.
Enforce the seven generic commands:
The fixup smtp command enforces that only the generic seven
RFC821 commands can be used during SMTP envelop exchange.
These
commands are HELO, RSET, NOOP, QUIT, MAIL, RCPT, and DATA.
Track SMTP command-response sequence:
Each command and response sequence is tracked for the following
anomalous signatures:
(1) truncated command;
(2) incorrect command termination -- not terminated with
carriage return and line feed;
(3) invalid character, "|;`<>", embedded in mail address.
(4) unexpected transition by the SMTP server.
(5) TCP stream editing;
(6) command pipelining.
Generate audit trail:
Audit record 108002 is generated when invalid character embedded in the
mail address is replaced.
For more info, see RFC821.
-- Lidiya White
-----Original Message-----
From: george gittins [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 28, 2002 10:39 AM
To: Lidiya White
Subject: RE: pix and e-mail problem [7:39643]
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Lidiya White
Sent: Wednesday, March 27, 2002 3:01 PM
To: [EMAIL PROTECTED]
Subject: RE: pix and e-mail problem [7:39643]
Mailguard on the PIX is "fixup". If you do have fixup protocol for mail,
remove this.
It is well know issue with Microsoft for the TAC :-)))
I do have article from Microsoft about this, If you would like I can
e-mail it to your later (I have it in bookmarks on another computer)...
-- Lidiya White
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 27, 2002 11:16 AM
To: [EMAIL PROTECTED]
Subject: pix and e-mail problem [7:39643]
For the past months i been receiving multiple e-mails from the outside
world. Im currently running mail gear from symantec as the primary
e-mail
server which is located behind the firewall (pix 520)this is map with a
conduit statement to a real ip address. The weird thing is this setup
has
been working before, of course i have upgraded the ios of the pix to
version
6.1 .Tech support told me that their were know issue with the pix and
mail
gear
especially mail guard..what is mailguard? and how can i diable it .. any
pointers are apreciated. I also running a packetshaper box and a caching
server from dell behind the firewall. at the same time the issue began
to
happen? does anyone have a setup familiar to mine?
thanks
57529# show version
Cisco PIX Firewall Version 6.1(1)
Cisco PIX Device Manager Version 1.1(2)
Compiled on Tue 11-Sep-01 07:45 by morlee
57529 up 75 days 2 hours
Hardware: AL440LX, 128 MB RAM, CPU Pentium II 233 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB
0: ethernet0: address is 0090.2710.27df, irq 11
1: ethernet1: address is 0090.270d.c12c, irq 10
2: ethernet2: address is 0090.2710.46a2, irq 15
Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES: Disabled
Maximum Interfaces: 6
Cut-through Proxy: Enabled
Guards: Enabled
Websense: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
ISAKMP peers: Unlimited
George Gittins
Internet Systems Manager
Weslaco, Tx 78599
Phone (956)9696557
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39835&t=39643
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
