<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Dear Rakib Bhai,</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;"><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">From your problem description i guess the Mail Outgoing Problem happening due to inpecting esmtp under class-map in ASA FW IOS version 9.X.Please remove the inpect esmtp under default class-map if u already not removed.Hope this solves your problem.</span><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times,
serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">Thanks</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">Raskin</span><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">IBM Bangladesh</span></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2"
face="Arial"> On Saturday, 12 April 2014, 20:30, Shahed Hasib <shahed@nns-solution.net> wrote:<br> </font> </div> <div class="y_msg_container"><div id="yiv9991762549"><div><div dir="ltr">Would you please try this:<br clear="none">object network obj-172.16.252.31<br clear="none"> nat(dmz,outside) static obj-203.223.92.38 service tcp 25<br clear="none">And also confirm apply the ACL<br clear="none">access-group INBOUND in interface outside<br clear="none">
</div><div class="yiv9991762549gmail_extra"><br clear="none"><br clear="none"><div class="yiv9991762549gmail_quote">On Sat, Apr 12, 2014 at 7:53 PM, Mirza Rakib <span dir="ltr"><<a rel="nofollow" shape="rect" ymailto="mailto:mmrakib@gmail.com" target="_blank" href="mailto:mmrakib@gmail.com">mmrakib@gmail.com</a>></span> wrote:<br clear="none">
<blockquote class="yiv9991762549gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="yiv9991762549yqt8437865625" id="yiv9991762549yqt99379"><div dir="ltr"><div><div><div><div>Hi,</div><div>Last
week we have replaced our old firewall (ASA 5540, IOS ver:8.2.5) by ASA
5545-X IOS ver:9.0.3. Everything work fine other than outgoing mail.
However, there was no issue in old firewall.</div><div>OLD Configuration(ASA 5540, IOS ver:8.2.5):<br clear="none">-----------------------------------------------------------<br clear="none">static (dmz,outside) 203.223.92.38 172.16.252.31 netmask 255.255.255.255<br clear="none">
<br clear="none">access-list INBOUND extended permit tcp any host 203.223.92.38 eq smtp<br clear="none">access-list DMZ extended permit ip host 172.16.252.31 any</div><div>NEW configuration( ASA 5545-X IOS ver:9.0.3):<br clear="none">-------------------------------------------------------------<br clear="none">
object network obj-172.16.252.31<br clear="none"> host 172.16.252.31<br clear="none"><br clear="none">object network obj-203.223.92.38<br clear="none"> host 203.223.92.38</div><div>nat(dmz,outside) source static obj-172.16.252.31 obj-203.223.92.38<br clear="none">access-list INBOUND extended permit tcp any host 172.16.252.31 eq smtp<br clear="none">
access-list DMZ extended permit ip host 172.16.252.31 any</div><div>=========================================================</div><div>In
command prompt it shows 550 5.7.1 Unable to relay after delivery address. We are
microsoft IIS SMTP, also tried sendmail, the issue is not in mail server.</div><div>In firewall log it show FIN/RSET flag from outside. Please help us to solve the issue.</div><div> </div><div>Regards,</div><div>Mirza Rakib</div><div><br clear="none"></div>
</div></div></div></div></div>
<br clear="none">_______________________________________________<br clear="none">
nog mailing list<br clear="none">
<a rel="nofollow" shape="rect" ymailto="mailto:nog@bdnog.org" target="_blank" href="mailto:nog@bdnog.org">nog@bdnog.org</a><br clear="none">
<a rel="nofollow" shape="rect" target="_blank" href="http://mailman.bdnog.org/mailman/listinfo/nog">http://mailman.bdnog.org/mailman/listinfo/nog</a><br clear="none">
<br clear="none"></blockquote></div><br clear="none"></div></div></div><br><div class="yqt8437865625" id="yqt13120">_______________________________________________<br clear="none">nog mailing list<br clear="none"><a shape="rect" ymailto="mailto:nog@bdnog.org" href="mailto:nog@bdnog.org">nog@bdnog.org</a><br clear="none"><a shape="rect" href="http://mailman.bdnog.org/mailman/listinfo/nog" target="_blank">http://mailman.bdnog.org/mailman/listinfo/nog</a><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>