IMail 6.06 Behind " Cisco 501 PIX " Router. Help please

To the Ipswitch web site

Ipswitch Forums
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



IMail 6.06 Behind " Cisco 501 PIX " Router. Help pleaseExpand / Collapse
Author
Message
Posted 8/8/2004 1:22:32 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 6/26/2006 2:16:00 AM
Posts: 21, Visits: 1
Hello All;

Trying to get everything back online after being down for over 6mnths.
Here is what I have going on here now.:

Doxis Cable Modem
Cisco 501 PIX Router
13 - Static IP's
Web Server ( Hosting 6 of the Static IP's )
Mail Server ( 1 Static IP Reserved for NIC )

Cable Modem feed the [Cisco 501 PIX Router]
The "Web Server" & "Imail Server" Are behind the PIX.

I have set up configuration on the PIX Router for:
access-list outside_in permit tcp any host xx.xx.xx.82 eq smtp
access-list outside_in permit tcp any host xx.xx.xx.82 eq pop

IN IMail I have it set up as per normal, With it having it's on it's Static IP
xx.xx.xx.82

Domains have there own static IP's ....... There are 6 - Domain.
6 - Static IP's Assigned

carrz-fox-fire.com --> 68.119.178.76

DNS Is set up with all proper information for them.
As seen here :
http://www.dnsreport.com/tools/dnsreport.ch?domain=carrz-fox-fire.com


I have never ran the IMail server on a dedicated server before, so I am at a loss.
I have been running it on the same server as my web for several years now.
So I am needing some help in what exactly to do here.

#1: How will IMail need to be set-up?
As in, basic Configurations, or a special way since the IP Address is not the same
As the Web Address's ? How would I need to do this?
When I installed IMail earlier this evening my Main Domain took on the
the NIC's IP Address. Will I need to change the IP Address in the Registery to the
One that my carrz-fox-fire.com has? or let it feed from a " Virtual IP" That IMail creates?

#2: For those people that are running a Cisco 501 PIX Router. (or) A PIX Period.
What other types of configurations will I need to add into the PIX's Conf?

Any information on this will be extremely great.

Thank You so very much.
Wayne
Post #656
Posted 8/8/2004 4:01:12 AM
Time Traveler

Time TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime Traveler

Group: Forum Members
Last Login: 8/12/2005 10:51:00 PM
Posts: 151, Visits: 1

well, if you want to point your dedicated ip to route mail traffic for domain name, other than www, you just need to setup this ip in MX record of your domain name in dns rather than A record.

when you connect to www server, your domain name resolved by A record, but, when your server need to receive mail, in this way your domain name resolved by MX record. Thats the only differences i see.

Generally, if your www and mail server are point to the same ip you do not need to specify mx record.

Hence, for each domain you should specify for MX valid extern ip addresses or single ip address if you host a virtual domains.

As i see, since your mail server has only one ip, you need to create 6 virtual hosts to route mail for your imail server and create valid mx records pointed to your imail servers ip.

Unfortunately, i have not enough Cisco experience to help, but from my opinion you need to open all ingoing/outgoing packets through 25 port. So, i'm guessing you need to specify at least this record:

access-list outside_in permit tcp any host xx.xx.xx.82 eq smtp

Also, all packets that does not correspond to your xx.xx.xx.82 mask unable to connect to your server, since your mail sever behind the cisco. Are you sure this is correct?



Regards,
Dmitri Elgin,
http://imailzip.com

Post #662
Posted 8/9/2004 11:28:53 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 6/26/2006 2:16:00 AM
Posts: 21, Visits: 1
Yes, everything is set up correctly within DNS for MX records and so forth.

Viewing my Log Files on the Mail Server, I cam across this:
( I do not know if this is a problem or not, but here it is )


20010809 111416 0.0.0.0:514 Server Ready For Action
20040809 111425 127.0.0.1 POP3D QUIT

The 2nd statement here.......... POP3D QUIT
Does this mean that the Pop Server has stopped due to no trafic?
Or does this mean that it is just stopped?

The SMTP & POP Services are Running on the server.

Wayne
Post #673
Posted 8/9/2004 11:33:26 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 6/26/2006 2:16:00 AM
Posts: 21, Visits: 1
Forgot to add "1 more thing" to this.

I can send mail. I have ran some test by sending mail to Hotmail.
And I receive what I send to Hotmail. So the SMTP part of it is working.
Just not the POP part of it.

As for the Cisco 501 PIX Router, I have it set up properly as far as
Me and the Cisco Experts know.

Also " Dmitri Elgin "
You stated:
As i see, since your mail server has only one ip, you need to create 6 virtual hosts to route mail for your imail server and create valid mx records pointed to your imail servers ip.


How do you point a MX Record to a Mail Server?

Wayne
Post #675
Posted 8/10/2004 3:30:11 AM
Time Traveler

Time TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime Traveler

Group: Forum Members
Last Login: 8/12/2005 10:51:00 PM
Posts: 151, Visits: 1

20010809 111416 0.0.0.0:514 Server Ready For Action
20040809 111425 127.0.0.1 POP3D QUIT

it means that some guy open pop3 telnet session at 2001 and then close the session at 2004 typing "quit"

"How do you point a MX Record to a Mail Server?"

by the hands of course



Regards,
Dmitri Elgin,
http://imailzip.com

Post #691
Posted 8/10/2004 9:56:44 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 6/26/2006 2:16:00 AM
Posts: 21, Visits: 1
Hello [Dmitri];

Yea I figured out the pointing to the Mail Server.
In the
mail A {0.0.00.0) <-- mail server IP
And have this for every Domain.

I set this in to please yesterday afternoon, right after making the last post.
And am still waiting for the Global Update to take effect.
And am also checking to make sure that the cache is cleared in my
PIX Router.

Thanks for the information on the IMail LOG.

Wayne
Post #694
Posted 8/10/2004 3:47:29 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 6/26/2006 2:16:00 AM
Posts: 21, Visits: 1
Mail server is up and running now....

It was the
mail A IP Address.
That had to be changed, so everything is setup and receiving mail now.

Take Care
Wayne
Post #702
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: Dave, Mark Singh, kevin r gillis, Jason Benton, Brandon Felger, Ben Henderson, Tripp Allen, Will Sansbury, Hush, FTPplanet.com, Hugh Garber, WUP-PM, Tom Lewis, mmulryan@ipswitch.com, mswimm, Brad Senter

PermissionsExpand / Collapse

All times are GMT -5:00, Time now is 3:06am

Powered By InstantForum.NET v4.1.4 © 2008
Execution: 0.125. 9 queries. Compression Enabled.