The Pix needs to map your external ip allocation for mail.domain.com to the
in side ip using the static command.
This is the old fashion way of doing it, it now recommended you use access
lists

static (inside,outside) [external ip] [internal ip] netmask 255.255.255.255

Now it knows whats where you can open ports for each service

conduit permit tcp host [external ip] eq smtp any
conduit permit tcp host [external ip] eq pop3 any
conduit permit tcp host [external ip] eq www any

The smtp, pop3 & www are known ports for the pix (25, 110, 80).

add this line for port 8383 for Imail web messaging.
conduit permit tcp host [external ip] eq 8383 any

As Len will point out using smtp will enable the mail guard feature and
prevents using some smtp commands, including smtp auth.

Dan


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jand Davallou
> Sent: 19 June 2002 01:07
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] Web messaging
>
>
> It is on the same network.  I can get to it while I am inside
> of the network
> by http://192.168.100.237:8383 but not if I am at home.  I
> tried going threw
> http://mail.domain.com:8383 and I get an error message.  We have a PIX
> firewall.  We don't have an internal DNS server either.  Thank you!!
>
> Alex Artigues wrote:
>
> > If it's on a different interface than the LAN you do need
> to open 8383. If
> > it's on the same network (interface) as the LAN can you get
> to it by the
> > internal ip:8383? If so you do you have an internal DNS server?
> > What firewall?
> > Alex
> >
> > ----- Original Message -----
> > From: "Jand Davallou" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, June 18, 2002 7:29 PM
> > Subject: [IMail Forum] Web messaging
> >
> > > When I try and connect to our mail server (it is inside
> our firewall
> > > with a private ip address) from inside our network I
> can't log onto the
> > > page http://mail.domain.com:8383 it gives me a there was
> no response.
> > > It can't find the server.  Do we need to open up port 8383 to gain
> > > access?
> > >
> > > --
> > > Thanks,
> > >
> > > Jand Davallou
> > > Health Care Workers Union, SEIU Local 250
> > > [EMAIL PROTECTED]
> > > 510-869-2287
> > > 510-763-2680 fax
> > >
> > >
> > >
> > > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > > to be removed from this list.
> > >
> > > An Archive of this list is available at:
> > > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> > >
> > > Please visit the Knowledge Base for answers to frequently asked
> > > questions:  http://www.ipswitch.com/support/IMail/
> > >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
> > Please visit the Knowledge Base for answers to frequently asked
> > questions:  http://www.ipswitch.com/support/IMail/
>
> --
> Thanks,
>
> Jand Davallou
> Health Care Workers Union, SEIU Local 250
> [EMAIL PROTECTED]
> 510-869-2287
> 510-763-2680 fax
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit the Knowledge Base for answers to frequently asked
> questions:  http://www.ipswitch.com/support/IMail/
>


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to