SMTP protocol problem with CISCO 836
Hi all,
I am not sure what I have to change in my CISCO 836 configuration in order my server will not deny incoming email ... I can send emails outside our network no-problem however if I want to send something in I am getting mail bounced back with message as follows:
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 10): 550 Invalid recipient:
I checked Microsoft site since we are using Windows 2003 server with Exchange and they posted there it is a CISCO problem...they are saying DISABLE SMTP protection on firewall, however I don't know if it is good to disable TCP inspection, since I still need that however I would like to permit SMTP protocol.
Bellow is my access list with Dialer configuration. My question is what should I change there? Is it the problem in
access list or is it problem in tcp inspection and what should be changed? Other then that I don't find any problem with my router configuration!
access-list 111 remark Outside (Internet) firewall
access-list 111 deny icmp any any echo
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any unreachable
access-list 111 deny icmp any any
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 permit tcp any any eq www
access-list 111 deny ip any any log
ip inspect name PUBLIC_ACCESS tcp
interface Dialer1
ip address negotiated
ip access-group 111 in
ip nat outside
ip inspect myfw out
ip inspect PUBLIC_ACCESS in
encapsulation ppp ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname
ppp chap password 0
ppp pap sent-username password 0
Need help ASAP.
Rgds,
csakos
