Peter Bowyer wrote:
>
..[snip]...
> >
> > FYI, the EXIM server is behind cisco firewall but leave all relevant
> > ports open (25, 110, 143, ...).
>
> BZZZZZT! Not a Cisco firewall with SMTP fixup running? That will get in
> the way. It's very broken. Turn it off.
Only as a side note, not to bring bout discussion....
Cisco released the PIX IOS version 7.x this year. One of the new
features is that they upgraded the SMTP fixup to support ESMTP as
well as SMTP, so we may not be able to say that anymore ;)
Or, from Cisco...
Extends SMTP inspection engine to support ESMTP, providing security
services that include protocol anomaly detection, protocol state tracking,
and support for the following new commands introduced in ESTMP protocol:
AUTH, DATA, EHLO, ETRN, HELO, HELP, MAIL, NOOP, QUIT, RCPT, RSET, SAML,
SEND, SOML, and VRFY
(I do think it is funny that they include SMTP commands in the
'new ESMTP' settings they now support)
here is a link to Cisco about the new PIX software for anyone interested
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09
00aecd80225ae1.html
--
--EAL--
--
