PIX 7.0 Exchange POP3

[Shea Lambert]

I'm trying to allow pop and pop3s traffic through my pix to a 2003 Exchange server. Internally when I telnet to port 110 it works but when I try from the outside it doesn't work.

static (inside,outside) [Public IP] [Internal IP] netmask 255.255.255.255

access-list inbound extended permit tcp any host [Public IP] eq pop3

access-list inbound extended permit tcp any host [Public IP] eq 995

[jmia]

Take out >

static (inside,outside) [Public IP] [Internal IP] netmask 255.255.255.255

And replace with >

static (inside,outside) tcp [Public IP] 110 [Internal IP] 110 netmask 255.255.255.255 0 0

static (inside,outside) tcp [Public IP] 995 [Internal IP] 995 netmask 255.255.255.255 0 0

Save and also issue clear xlate

Hope this helps / Jay

[Patrick Iseli]

I do not see what it does change to replace the NAT (network address translation), which was originaly configured, with a PAT (port address translation) ?

I think the the original config was fine just do a

< clear xlate > and check the access-list if there are hitcounts.

sincerely

Patrick

[Shea Lambert]

That worked. Thanks for the help!