I just deployed a PIX 506E over the weekend in a production environment. The company that I'm doing this for previously had an administrator who used both Linux firewalls, and Linux email. Until I set up Exchange for this client, they will be using the Linux mail server. Today, users complained that they were able to receive email but not send. Upon further investigation, I found that they were using SMTP over SSL. The old administrator gave me a very brief explanation that there are issues with the SMTP over ssl protocol and the PIX. I've done just about everything I can think of. I opened up tcp ports 465, and 587 in addition to port 25. I tried to log onto the server using a client so I can see the traffic come into my environment, but my client did talk to the SMTP server and the PIX did not drop packets. The message that I got back from my client is ..... Anthony Daramola on 11/1/2004 7:01 PM
554 <adaramola@createhope.com>: Relay access denied...... 'anthonydaramola@yahoo.com' on 11/1/2004 6:53 PM
421 Error: too many errors.... and something along the lines of "this server does not support SSL, if it worked before, please contact your system administrator". I called Cisco without luck and I also scoured Google on possible PIX and smtps issues without luck. Because I know that this SMTP over ssl worked on the legacy Linux firewall, I know that it’s at the very least associated with the PIX installation. I think that somehow the traffic is dying at some point of the process. Please help, this is driving me crazy.
