Hi all,
I have an asa 8.2 with 2 interface inside and outisde.
Ip source 192.168.50.5
Ip destination 192.168.100.125
Port 25
When I do a packt trace.
packet-tracer input inside tcp 192.168.100.125 smtp 192.168.50.5 smtp
!
Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow
Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.50.0 255.255.255.0 inside
Phase: 3
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group inside_access_in in interface inside
access-list inside_access_in extended permit ip object-group No_Restricted any
object-group network No_Restricted
network-object
Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow
Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.50.0 255.255.255.0 inside
Phase: 3
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group inside_access_in in interface inside
access-list inside_access_in extended permit ip object-group No_Restricted any
object-group network No_Restricted
network-object 192.168.100.0 255.255.255.0
Additional Information:
Phase: 4
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 5
Type: INSPECT
Subtype: inspect-smtp
Result: ALLOW
Config:
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect esmtp _default_esmtp_map
service-policy global_policy global
Additional Information:
Phase: 6
Type: NAT
Subtype:
Result: DROP
Config:
nat (inside) 1 access-list inside_nat_outbound
match ip inside 192.168.100.0 255.255.255.0 inside any
dynamic translation to pool 1 (No matching global)
translate_hits = 371572, untranslate_hits = 0
Additional Information:
I added a static (inside,inside) 192.168.100.125 192.168.100.125 , but still the same issue.
Any ideas.
Saludos
