With the smtp fixup applied. Users who access the email server via their ISP
connection can not send mail to people with outside email addresses. I guess
the  command like mail to: gets sent to the email server as a xxxx command
by PIX since it is not allowing a telnet session  thus a relay message is
sent to the user. 5.7.1 can not relay. Once smtp fixup is removed everything
is fine.


----- Original Message -----
From: "Tom Meunier" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Friday, February 22, 2002 1:28 PM
Subject: RE: PIX fixup and E2K


What do you mean "relay problems occur"?  Exactly what is the behavior
that you are trying to alleviate?  Depending on the version[1] either
Cisco has patched it, or you need a firm commitment from your management
that a: you either do not want to use ESMTP and Mailguard stays, even
though it doesn't really do anything; or b: you want to use ESMTP and
there are no documented or theoretical vulnerabilities that Mailguard
cures anyway, and so it should be disabled.[3]

Pix guy:  "I want mailguard!  Waaaahhh!"
Exchange guy:  "I want it disabled!  Waaahhhh!"
Pix guy:  "Doody-head!"
Exchange guy: "Dum-dum face!"

-tom

[1]  more specific than 5.something, please.
[2]  appropriately patched, as anything in production should be.
[3]  Garcon, please have that sentence taken out back and shot.


> -----Original Message-----
> From: Tony Hlabse [mailto:[EMAIL PROTECTED]]
> Posted At: Friday, February 22, 2002 11:51 AM
> Posted To: MSExchange Mailing List
> Conversation: PIX fixup and E2K
> Subject: PIX fixup and E2K
>
>
> I have a customers that whats fixup applied to SMTP. Well
> with it on relay problems occur. He has a single E2K server
> behind a PIX 5. something version of the OS. It seems there
> is nothing that can be done on the PIX side to limit the SMTP
> fixup to all but on IP address. Is there a work around on
> this using a relaying server or gateway. Damm mailguard.
>

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to