topic Re: pix possible problem - not allowing smtp authentication in Network Access Control

pix possible problem - not allowing smtp authentication

sysco-zgb — Fri, 21 Feb 2020 18:17:05 GMT

Pix 7.2.0 doesn't have "inspect esmtp" line added. But, authentication when sending a mail from wan doesn't work (mail server is in DMZ). When you try it from LAN - it works without problems.

Is it possible that pix block smtp authentication from WAN to DMZ, although there is no "inspect ESMTP" ?

Re: pix possible problem - not allowing smtp authentication

jgervia_2 — Wed, 01 Nov 2006 10:31:10 GMT

Hello,

Without the 'inspect esmtp' line there is no (e)smtp protocol checking - there would be no reason the pix would drop the smtp for protocol reasons.

I would check your lan configuration to make sure that you don't have access-list issues - normally "inside' flows to the DMZ are allowed by default because of the security levels, but WAN to DMZ (assuming WAN had a lower security level than the DMZ) would not.

--Jason

Please rate this message if it helped resolve some or all of your issue.

Re: pix possible problem - not allowing smtp authentication

sysco-zgb — Wed, 01 Nov 2006 21:45:06 GMT

Thanks for your answer.

I found out that ISP provider installed another firewall between WAN and our LAN. This is a kind of additional security for their key users. Guess what, their support told me "inspect esmtp is *on* by default".

Some security!!