North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: disabling SMTP

  • From: Suresh Ramasubramanian
  • Date: Sun Mar 28 09:11:20 2004

[3/28/2004 7:29 PM]  Rob Nelson :

Could you elaborate on this? I use PIX firewalls all over the place and don't seem to have a problem with SMTP or ESMTP.
Check whether "smtp fixup" is enabled - and if it is, disable it using

# no fixup protocol smtp 25

Test the results (from an outside host, using netcat / telnet to port 25) to see for yourself.

Briefly, a pix doing "smtp fixup" -

* Munges the smtp banner entirely with ***** (that breaks an rfc or two)

* Disables ESMTP (so EHLO will not be accepted)

* Munges several replies returned by the mailserver, turning them to XXX

srs

--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations