<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: DSL &amp; Pix configuration issue in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3130#M689186</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Is this the Appendix C you were following?  &lt;A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/config/msexchng.htm" target="_blank"&gt;http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/config/msexchng.htm&lt;/A&gt;&lt;/P&gt;&lt;P&gt;That is only for Exchange mail relay&amp;#146;s through the PIX.  Everything on your network should gateway at the PIX&amp;#146;s inside interface.  The static will be setup between the mailserver&amp;#146;s real address and it&amp;#146;s MX record.  The PIX proxy arps for that address and it must be unique and unused on the outside segment.  If you are not doing NAT, use the same address twice in your static.  Then, setup your conduits allowing SMTP and/or POP3.  If you want to use NetBios exchange mail, you have to open a lot of conduits and it&amp;#146;s pretty insecure so I&amp;#146;d just stick with SMTP as your Internet gateway.  This link should help:&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://www.cisco.com/warp/customer/707/28.html" target="_blank"&gt;http://www.cisco.com/warp/customer/707/28.html&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 14 Feb 2001 22:39:37 GMT</pubDate>
    <dc:creator>s-doyle</dc:creator>
    <dc:date>2001-02-14T22:39:37Z</dc:date>
    <item>
      <title>DSL &amp; Pix configuration issue</title>
      <link>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3129#M689157</link>
      <description>&lt;P&gt;We are trying to install a pix 506 behind a 675 dsl&lt;/P&gt;&lt;P&gt;modem. One of the specifications is to allow mail&lt;/P&gt;&lt;P&gt;to the inside MS-exchange server. Built the static&lt;/P&gt;&lt;P&gt;and conduit per appendix c of the pix config guide,&lt;/P&gt;&lt;P&gt;But can only get outbound mail to work. &lt;/P&gt;&lt;P&gt;Should we use the IPCP address from the 675 as the&lt;/P&gt;&lt;P&gt;"outside" interface address?&lt;/P&gt;&lt;P&gt;We tried building the conduit with the IPCP address&lt;/P&gt;&lt;P&gt;as the "outside" address in the conduit command &lt;/P&gt;&lt;P&gt;with no luck....&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 05:46:58 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3129#M689157</guid>
      <dc:creator>millerv</dc:creator>
      <dc:date>2020-02-21T05:46:58Z</dc:date>
    </item>
    <item>
      <title>Re: DSL &amp; Pix configuration issue</title>
      <link>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3130#M689186</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Is this the Appendix C you were following?  &lt;A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/config/msexchng.htm" target="_blank"&gt;http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/config/msexchng.htm&lt;/A&gt;&lt;/P&gt;&lt;P&gt;That is only for Exchange mail relay&amp;#146;s through the PIX.  Everything on your network should gateway at the PIX&amp;#146;s inside interface.  The static will be setup between the mailserver&amp;#146;s real address and it&amp;#146;s MX record.  The PIX proxy arps for that address and it must be unique and unused on the outside segment.  If you are not doing NAT, use the same address twice in your static.  Then, setup your conduits allowing SMTP and/or POP3.  If you want to use NetBios exchange mail, you have to open a lot of conduits and it&amp;#146;s pretty insecure so I&amp;#146;d just stick with SMTP as your Internet gateway.  This link should help:&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://www.cisco.com/warp/customer/707/28.html" target="_blank"&gt;http://www.cisco.com/warp/customer/707/28.html&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 14 Feb 2001 22:39:37 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3130#M689186</guid>
      <dc:creator>s-doyle</dc:creator>
      <dc:date>2001-02-14T22:39:37Z</dc:date>
    </item>
    <item>
      <title>Re: DSL &amp; Pix configuration issue</title>
      <link>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3131#M689206</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Correct. I have used the appendix C config before, the difference being this one is using dsl.&lt;/P&gt;&lt;P&gt;our last attempt had a static definition between the registered IP address for the MX record and&lt;/P&gt;&lt;P&gt;an un registered address on the inside. The only thing not working at this point is inbound mail.&lt;/P&gt;&lt;P&gt;clents can connect to the web, and mail goes out, but not in. Its off to the TAC on this. They have&lt;/P&gt;&lt;P&gt;looked over the Pix config and see notning wrong. Its going to be one of those intersting &lt;/P&gt;&lt;P&gt;Techniclal Discoveries that make you slap your head and shrug your shoulders.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 15 Feb 2001 18:25:13 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/dsl-pix-configuration-issue/m-p/3131#M689206</guid>
      <dc:creator>millerv</dc:creator>
      <dc:date>2001-02-15T18:25:13Z</dc:date>
    </item>
  </channel>
</rss>

