topic Re: Distant Mail server not workink on the ASA5510 in Network Security

Distant Mail server not workink on the ASA5510

yvannpaillet — Mon, 11 Mar 2019 20:46:14 GMT

My mail server is not in my network, it's over internet elsewhere.

After installing the ASA 5510, i can not get my mails any more.

Please help me.

manish arora — Thu, 16 Jun 2011 17:12:07 GMT

can you post output of :-

sh service-policy inspect esmtp

Manish

yvannpaillet — Thu, 16 Jun 2011 17:43:24 GMT

Here is the output

rmavila — Thu, 16 Jun 2011 18:13:46 GMT

Hi,

The traffic from the mail server to the host goes through imap or pop3. So you need to allow these ports on your outside interface via access-list.

Regards

Rahul

yvannpaillet — Wed, 22 Jun 2011 11:09:43 GMT

How can i do it, could you show me how to do it by using the attach file i sent before.

Many thinks.

Best regards

rmavila — Wed, 22 Jun 2011 11:20:12 GMT

Hi,

Try adding these access-lists :

access-list acl_out extended permit tcp any host eq 110

access-list acl_out extended permit tcp any host eq 143

access-list acl_out extended permit tcp any host eq 993

access-list acl_out extended permit tcp any host eq 995

Rahul

yvannpaillet — Thu, 23 Jun 2011 10:48:37 GMT

I'm sending you the diagramm.

praprama — Wed, 29 Jun 2011 21:30:00 GMT

Hi,

Do you see any syslogs on the ASA for any dropped traffic from the e-mail server?

Thanks and Regards,

Prapanch