ASA blocking email

[Namrepus1]

Please move to the appropriate area if I have posted in the wrong forum.

I am having an issue sending emails externally from an internal web host.

This is the log im seeing on the ASA.   I am not able to ping the exchange from the server.

Can anyone tell me what entry I should be adding to allow the application stting on 192.168.99.11 to be able to send email to the exchange server located on 172.20.204.114? 

[Karsten Iwen]

Your Log doesn't show that the MailGuard is the problem here but disabling that function is very often the solution for all kind of issues with SMTP through the ASA:

policy-map global_policy

class inspection_default

  no inspect esmtp

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Namrepus1]

Thank you Karsten.

I've tried your suggestion but looks as though no ESMTP maps are configured.

[Karsten Iwen]

It's not the ESMTP-Map. It's enough to have "inspect esmtp" enabled and the ASA will manipulate the SMTP-communication.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Namrepus1]

Ok.  These are my results.  Looks as though inspection is not enabled.

[Karsten Iwen]

ok, then I would try to send a mail manually from the commandline ot the application-server:

http://www.linuxjournal.com/content/sending-email-netcat

What's the output of that?

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Namrepus1]

I cannot establish a telnet session with the SMTP server from the internal web host 192.xx.xx.xx

but I can from my machine 172.xx.xx.xx

[Karsten Iwen]

Please attach your actual config to analyze that further.

Sent from Cisco Technical Support iPad App