accessing mail server on dmz

[rifkianto]

hi all...

i already connect using isp 1 and add connection using isp 2.

i put mail server on dmz port and permit tcp on 444, 1080, 8080, 80. but i cant't connect from isp 1 to mail server on isp 2. could some one give an answers.. thx

[ehirsel]

How are you tring to connect? The mail server is not on the isp2 connection, it resides in the dmz, so how are you tring to address it? What type of firewall is protecting the mail server, pix, ios fw, or other make/model?

[rifkianto]

Configuration is :

Mail on colocation isp 1

/ \

/ \

515E ISP1 515E ISP2 - (DMZ) - mail server2

| |

Me

I try to conncet or monitor mail server 2 on ISP 2. i add access-list on acl_dmz to opened 444, ssh also telnet but it's not work...

Could you help me...

Thx

[ehirsel]

I'll try to help. In looking over your topology you have two pix 515e models in use, one as isp1 colocation, the other at isp2. Can you post both pix configs here, scrubbing any sensitive data? The info should be helpful in resolving your issue.

I assume that the path from isp1 to isp2 is like this: pix 515e at isp1 outside interface, thru the routed network, into the pix at isp2 outside interface. Is that correct?