07-15-2004 02:05 PM - edited 03-02-2019 05:06 PM
Hi,
Below you will find the running-config. For some reason I am not able to access the mail server SMTP 25 through the router. Any input would be greatly appreciated.
Thank You,
Bobby
Authorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!
User Access Verification
Username: xxxxx
Password:
mhirouter1#sh ru
Building configuration...
Current configuration : 2804 bytes
!
! Last configuration change at 11:53:10 America Wed Jul 14 2004
! NVRAM config last updated at 11:53:11 America Wed Jul 14 2004
!
version 12.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname mhirouter1
!
security authentication failure rate 3 log
security passwords min-length 6
logging queue-limit 100
logging buffered 51200 debugging
logging console critical
enable secret xxxxx
!
username xxxx privilege 15 password xxxxxx
clock timezone America/New_York -5
clock summer-time America/New_York date Apr 6 2003 2:00 Oct 26 2003 2:00
ip subnet-zero
no ip source-route
!
!
ip tcp synwait-time 10
ip domain name yourdomain.com
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool sdm-pool1
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server xxx.xxx.0.85 xxx.xxx.0.85
!
!
no ip bootp server
ip cef
ip audit notify log
ip audit po max-events 100
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
!
!
!
!
!
!
!
interface FastEthernet0
description $ETH-WAN$OUTSIDE
ip address xx.xxx.170.27 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip route-cache flow
duplex auto
speed auto
no cdp enable
!
interface FastEthernet1
no ip address
no cdp enable
!
interface FastEthernet2
no ip address
no cdp enable
!
interface FastEthernet3
no ip address
no cdp enable
!
interface FastEthernet4
no ip address
no cdp enable
!
interface Async1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
!
interface Vlan1
description $FW_INSIDE$INSIDE
ip address 10.10.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip route-cache flow
!
ip nat inside source list 10 interface FastEthernet0 overload
ip nat inside source static tcp 10.10.10.3 25 xx.xxx.170.27 25 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 68.236.170.1
ip http server
ip http authentication local
ip http secure-server
!
!
logging trap debugging
access-list 10 permit 10.10.10.0 0.0.0.255
no cdp run
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line 1
flush-at-activation
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 4000 1000
scheduler interval 500
!
end
mhirouter1#
mhirouter1#
07-15-2004 04:09 PM
Is SMTP the only protocol not working? Are you trying to access SMTP via the device IP address or by name? Is the server up? What port/interface is it on?
I also don't see "ip routing" enabled.
07-16-2004 08:09 AM
Below are the answers to your questions.
Steve
Is SMTP the only protocol not working?
Every other protocol is working.
Are you trying to access SMTP via the device IP address or by name?
I am trying to access the mail server via the IP address. Example: telnet 63.115.9.204 25.
Is the server up?
The server is up and running. I am able to connect to port 25 from the internal network, but I am not able to connect to the port via the internet.
What port/interface is it on?
The static internal address of the mail server is 10.10.10.3.
I hope I answered your questions throughly.
07-16-2004 10:31 PM
Just check show ip nat translation , whether you can see the port 25 is mapped .Try to access mail server from outside after clearing translations once.Are you able to browse Internet from your private network ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide