Hello Lekshmi,
Thank you for contacting Trend Micro Technical Support.
Please correct me if I misunderstood your concern. Based on your message, mail coming from IMSS (through PIX Firewall) to the Exim Mail Server is not getting authenticated.
As Wycliffe suggested, You may disable the mail guard feature of PIX Firewall. You may issue this command on the PIX CLI:
# no fixup protocol smtp [port]
Example:
# no fixup protocol smtp 25
I hope this addresses your inquiry. If the recommendation provided fails to address the issue, kindly forward me these information for a complete analysis:
1. IMSS Diagnostic logs:
1.1 Open IMSS Web Management Console
1.2. Go to Configuration > Logs > Log Maintenance
1.3. Set Log Level to Diagnostic
1.4. Click "Save" button
1.5. Click "Apply Now"
1.6. Replicate the issue
1.7 Collect the following:
a. IMSS Configuration File
- /opt/trend/imss/config/* (all files)
b. IMSS Program Logs
- /opt/trend/imss/log/log.imss.YYYYMMDD.XXXX
- /opt/trend/imss/log/emgr.imss.YYYYMMDD.XXXX
2. Answers for the following questions (if applicable):
2.1. How many mails are coming in to their server everyday?
2.2. What's the average concurrent connections that their ISVW is receiving?
2.3. What's the hardware specs. of the server experiencing the problem (CPUs, RAM, etc.)?
3. Output of the following commands:
# dmesg
# uname -a
# df -k
# prtdiag
# netstat -an
# ps -en
4. MTA logs (i.e. Postfix, Sendmail, etc.)
- /var/log/maillog (Red Hat)
- /var/log/mail (SuSE)
- /var/log/messages
5. MTA Configuration files:
- /etc/postfix/* (all files)
6. Network and System conditions:
- Network Diagram illustrating the Mail flow (Example: Clients >> Postfix >> IMSS >> Postfix >> Internet)
- Distribution used (# cat /etc/redhat-release; cat /etc/SuSE-release)
- Kernel used (# uname -a)
Kindly keep all files in a single zip file with password protection (novirus). You may email us the file if it is less than 5MB or upload it to our FTP server if it is more than 5MB:
Site: ftp-upload.trendmicro.com.ph
Username: ftpuser
Password: ftp-trend
Directory: /atsc/robertr/canbank.co.in
I hope all goes well. Please do not hesitate to write back with regards to this case. Thank you so much.
For answers to Frequently Asked Questions and known issues on Trend Micro products, please visit our Knowledge Base:
http://esupport.trendmicro.com
Best regards,
==========================================================
Robert Reidenbach
RHCE, Comptia Security+, TCSM, TCSE
Systems Engineer
TrendLabs HQ, Trend Micro Incorporated
[Knowledge Base]
http://esupport.trendmicro.com
[URL / website]
http://www.trendmicro.com
[Contact us]
http://www.trendmicro.com/en/about/contact
==========================================================
[Send your Feedback to] support_manager@???
==========================================================
-----Original Message-----
From: bahati@???
Sent: 6/5/2006 06:13:30 PM
To: "Lekshmi A R" <lekshmiar@???>; <exim-users@???>; "Asia Support" <asia@???>
Subject: [exim] SMTP AUTH using pwcheck in exim
Try and disable Smtp inspection on the PIX and see if it works well.
This could be from ver 6.2 downwards on the Cisco PIX software
Wycliffe
-----Original Message-----
From: exim-users-bounces@??? [
mailto:exim-users-bounces@exim.org]
On Behalf Of Lekshmi A R
Sent: Monday, June 05, 2006 1:04 PM
To: exim-users@???; asia@???
Subject: [exim] SMTP AUTH using pwcheck in exim
Hi,
I have enabled SMTP AUTH in my mail server running with exim.4.62 on
Linux. While trying to send mail from client through InterScan Messaging
Secirity Suite (IMSS) from TrendMicro to the mail server, mail are going
from some pcs where as from PCs which are connecting to the mail server
through, PIX Firewall, it is not getting authenticated. Where as when we
try from these PCs to connect directly to mail server, bypassing IMSS
server, it is getting authenticated. Is there something like, when it is
passing through 2 firewalls, (PIX and IMSS), authentication will not
happen.
Lekshmi A. R.
Computer Programmer
DCG, DIT
Canara Bank
Naveen Complex
#14, M. G. Road
Bangalore - 560 001
Ph: (080) 2558 4040 - 286
2559 8548
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
