Pix 515 IOS 4.4 permit DNS

[s.ingram]

With DNS I am trying to set up an permit statement for a node.

any sugestions??

[s.ingram]

Our Mail system is lotus Notes 5.07 and we are running a static (inside,internet) 208.X.X.X 172.20.X.X netmask 255.255.255.255 0 0

conduit permit tcp host 208.X.X.X eq smtp any.

We are are recieving random delivery and recieve failures from sites who are using (ESMTP) Exstended simple mail transport protocal.

example:

**********************

EHLO www.snsa.com

500 Syntax error, command "XXXX www.snsa.com" unrecognized

**********************

[a-vazquez]

conduit permit tcp host x.x.x.x eq dns any

This will allow anyone in to your DNS server. Is that what you are trying to accomplish?

[tcrellin]

The SMTP relay in the PIX is designed to block ESMTP. If you want to use ESMTP you must turn off this feature using "No fixup protocol smtp".