OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Bug in postfix 2.2.10- reverse PIX issue??

From: Alexander Grüner (agruenergmx.de)
Date: Tue Jul 11 2006 - 07:05:22 CDT


Justin :-)

> I am on the receiving end of the message unfortuantely, I do not have
> access to MVCC.EDU's PIX.

Bad luck ;-) - contact the admin...

>> Do you use "fixup protocol smtp" or "no fixup protocol smtp" on your
>> pix ? Look to the documentation of Cisco. That's perhaps your problem
>> - it has been mine long ago..

This is one explanation for your problem, if PIX is the problem (which
is often the case): "Only the SMTP commands specified in RFC 821 section
4.5.1 are allowed on a mail server. These are: HELO, MAIL, RCPT, DATA,
RSET, NOOP, and QUIT. When the PIX Firewall observes an SMTP command not
in the preceding list, the PIX Firewall proxies a response of "500
command unrecognized" to the remote device and drops the packet before
it reaches the protected mail server."

So you might run a ethereal / tcpdump and have a look to your packets
and especially a "500 command unrecognized".

Hope that helps.

Regards,
Alexander