topic Re: Mail Guard in Network Security

Mail Guard

austin0824 — Mon, 11 Mar 2019 13:50:41 GMT

We had power maintenance last weekend and had to shutdown our 6513 switch. When we powered up, we discovered we could no longer send and receive emails to external users. Microsoft came in to say we had a problem with the mailguard on our firewall module. How do I deal with that? Cisco documentations say we should disable mailguard. If right, how do I do this?

Re: Mail Guard

abinjola — Mon, 29 Sep 2008 15:18:15 GMT

no fixup protocol smtp

Re: Mail Guard

marcaccini — Thu, 17 Jun 2010 13:12:50 GMT

is it possible to keep the mailguard smtp inspection enabled but to bypass for specific hosts?

Re: Mail Guard

David White — Thu, 17 Jun 2010 14:30:40 GMT

Hi Matt,

Yes, you can apply any inspection to match any traffic defined in an ACL. However, I would disagree in the previous poster that disabling mail inspection is the correct course of action.

If you want to inspect email traffic just to a mail server at 10.1.1.1, the configuration you would use is below:

access-list email extended permit tcp any host 10.1.1.1 eq smtp
!
class-map email-class
match access-list email
!
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect h323 h225 omar
inspect h323 ras
class email-class
inspect esmtp
!
service-policy global_policy global

Sincerely,

David.