Cisco Firewall :: Unable To Send Mails From ASA 5505

Mar 26, 2012

I have 2 subnets bought from my provider 194.102.98.128/27 and 194.102.98.160/27.
 
From my provider a have the following setup:
IP Address:  86.120.151.66
Netmask:     255.255.255.128
Gateway:     86.120.151.1
DNS (1): 213.154.124.1
DNS (2): 193.231.252.1 
My IPs are static routed by my provider thought 86.120.151.66 .
 
On the firewall I have the following set-up:
 
Outside Interface: 86.120.151.66/25 security level 0
DMZ interface: 194.102.98.129/27 security level 50
Inside Interface: 194.102.98.161/27 security level 100
0.0.0.0 0.0.0.0 [1/0] via 86.120.151.1, outside
 
 
Everything works perfectly except when I try to sent an email. The email gets sent (eventually), but afert a long waiting time, 45-60 sec. The connection is opened instally to the server but then just hangs there for 40-50 sec. The problem is that a have an aplication on a server that has to send confirmation emails, and that aplication is limited to a 30 sec timeout for conecting to the mail server, much less then the 45-60 sec that I have now. The mail server is hosted by a data center, it is not in my networks (location).
 
I have tried deleting the ESMTP inspection, that doesn't work. Pinging my mail server rezults in a average time of 20 ms. And when a do a tracert the hight value in a  hop doesn't usually pass 80 ms, the average is 20-25 ms.
 
The problem is ONLY when sending emails. Everything else works perfect, including receiving emails from the same server.
 
My running config is:
 
hostname ASA-Adisys
domain-name Intern.ro
enable password 0./39zRW9yhKK/bO encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names

View 3 Replies


ADVERTISEMENT

Cisco Firewall :: ASA 5505 - Can't Receive Mails From Some Customers

Jul 20, 2011

I can't receive mails from some customers, asa 5505 log get the message: "ASA_Outside|Deny TCP (no connection) from X.X.X.X/35702 to ASA_Outside/25 flags ACK  on interface outside".

View 5 Replies View Related

Protocols / Routing :: How To Use SMTP To Send Mails From Laptop

Feb 23, 2012

My coworker told me that port 25 is closed in office , so I can't use [URL] as SMTP Server and to ask for direct line instead of 25.I don't know how to use/setup direct line

View 4 Replies View Related

Unable To Read Yahoo Mails

Dec 14, 2011

At each time I open the internet page,at the left in the bottom of the page near of the STARt buton, it's written:"Error on page".And like that I can't read my emails on YAHOO and I can't post any picture in FACEBOOK.

View 10 Replies View Related

Cisco Firewall :: Unable To Send IPv6 Traffic Through ASA 5510?

Oct 9, 2011

below is my sanitized ASA 5510 config.  got an IPv6 T1 from at&t and im unable to pass any traffic from my LAN clients out. 
 
:
ASA Version 8.2(2)
!
enable password PoBmYYxuAzCciKRA encrypted

[Code].....

View 6 Replies View Related

Linksys Wired Router :: Cisco RV042 - Firewall Blocks Mails?

Dec 10, 2011

I have a Cisco RV042 Wired Router. I've got a static IP and a MS Small Business Server in my Router Network. I have forwarded the essential ports to use the IIS and the Exchange Server of my SBS2011 (https, http, smtp, rpc).
 
I can use the IIS, if the firewall is activated, but the exchange Server can not receive any emails. I have also created some firewall access rules for the mentioned services but without success.

View 1 Replies View Related

Cisco Firewall :: ASA 5505 - Proxy Server Send Register To Hosted Server Private IP Changed

Aug 23, 2011

We have Cisco ASA 5505 with ASDM 5.2 We have one Proxy server in our Local Lab and pointed to Hosted service(Simple Signal)issue is, When our proxy server send register to hosted server, ASA change private IP and post with outside IP and src port as 1063 every time.

Here is debug log on real time monitoring.
 
Aug 24 2011    05:21:19    302015    203.xxx.xxx.226    192.168.1.51     Built outbound UDP connection 3774 for outside:203.xxx.xxx.226/5060 (203.xxx.xxx.226/5060) to inside:192.168.1.51/27014 (99.119.161.107/1142)
Aug 24 2011    05:21:19    607001    203.xxx.xxx.226         Pre- allocate SIP Via UDP secondary channel for inside:192.168.1.51/27014 to outside:203.xxx.xxx.226 from REGISTER message
Aug 24 2011    05:21:19    710005    203.xxx.xxx.226    99.xxx.xxx.107     UDP request discarded from 203.xxx.xxx.226/5060 to outside:99.xxx.xxx.107/1063

Here 99.xxx.xxx.107 is Our ASA Outside IP address 203.xxx.xxx.226 is Hosted server IP address. My ASA config is attached.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 Unable To Ping

Sep 9, 2011

I just tried to configure my ASA but unable to ping.  My setup is as follows:
 
Cable Modem (DHCP from IPS)---> ASA (192.168.1.1)--->Belking Router (192.168.5.1)--->Switch (192.168.5.14)--->
 
ASA Version 8.2(3)
!
hostname WoodHomeASA-1

[Code].....

View 30 Replies View Related

Cisco Firewall :: ASA 5505 Unable To Get To Internet

Dec 27, 2011

First time attempting to set up a 5505.  Trying to replace a snapgear firewall and replicate the settings to the 5505. 

View 12 Replies View Related

Cisco Firewall :: ASA 5505 Unable To See Matching ID Of 0

Sep 20, 2011

I have a command line from ASA 5505 like below :
 
nat (inside) 0 access-list NO_NAT
The problem is I cannot see any matching ID of 0 at the (outside) like :
nat (outside) 0  xxxxxxxxxxxxx

Another problem is there is also no any access list with the name of NO_NAT.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 / Unable To Use Internet?

Dec 11, 2012

I am using ASA 5505.Below are my sh run.I am not able to ping my gatway i.e 182.73.131.89
 
interface Ethernet0/0
description Internet Interface
switchport access vlan 61
!
interface Ethernet0/1
description office Internet
switchport access vlan 50

[code]....

View 3 Replies View Related

Cisco Firewall :: Unable To Save Config In ASA 5505?

Sep 26, 2012

I have ASA 5505 and I save the configuration in the ASA 5505  using write memory or using copy run start but whe i unplug the power  cord and plug it back in the ASA gets its factory default configuration.

View 8 Replies View Related

Cisco Firewall :: Unable To Access Internet With ASA 5505

Sep 27, 2012

I have config ASA 5505 and it is conencted to layer 3 switch that connects to cable  Modem.
 
ASA is config with DHCP option and PC is able to get the IP from ASA. But from PC i am unable to access the internet. From ASA  itself i am able to ping the Websites fine.
 
ASA has config with DHCP for inside and also it is doing NAT.
 
When i connect the ASA  directly to Cable modem then pc is able to access the internet.

View 4 Replies View Related

Cisco Firewall :: 5505 - ASA Unable To Ping Internet From DMZ

Apr 5, 2013

I have setup 5505 ASA  for Testing purposes. It has static route to layer 3 switch on outside interface that  goes  to the internet.
 
ciscoasa#                                                sh route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

[Code].....

View 20 Replies View Related

Cisco Firewall :: 5505 VPN Client Unable To Connect

Feb 13, 2012

We have a cisco asa 5505 on which we have setup a group VPN. The VPN connections from all cisco vpn clients works fine except one. The keep getting the below error

"Secure VPN Connection terminated locally by the client. Reason 412: The remote peer is no longer responding. Connection Terminated".

Not sure why only one client won't be able to connect. The version we are using is 5.0.02 for VPN client.

View 10 Replies View Related

Cisco Firewall :: Unable To Telnet / SSH / RDP From Inside DMZ / ASA 5505

Oct 31, 2011

I am unable to Telnet/SSH/RDP from my inside network to my DMZ. I am not sure where the problem lies, I am able to use VNC from the inside to the DMZ (ports 5800, 5900), and also establish connection on Ports (26700-26899). I have a computer connected directly to the DMZ and those services work to all networks on the DMZ.I have attached Logs of successful VNC connections, unsuccessful RDP and Telnet sessions, and the running config.

View 23 Replies View Related

Cisco Firewall :: ASA 5505 With IOS 8.4 / Unable To Ping Or Map Drives To It?

Aug 12, 2012

I configured a new Asa 5505 with Ios 8.44-1-k8.bin and when I installed the Asa the client's after about 1 hour were unable to ping or map drives to the Asa.  I got the following error,%ASA-2-106007: Deny inbound UDP from XXXX to XXXX due to DNS Query. I added the command same-security-traffic permit intra-interface they were then able to ping the server and connect to the Internet, but still unable to map drives i could see the connections from the Pc's to the server in a show conn with was tcp port 445 with Saa? I reverted back to Ios 8.25 and everything works.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 / Unable To Use Full Bandwidth?

May 23, 2011

When I have a computer directly connected to the Cable Modem I get 9.84MB Down and 1MB Up. When I put it behind the ASA 5505 with policing on the interface, I only get 4MB Down and 660Kb Down.What I'm wanting to do is setup this up to enable my VoIP to have a higher priority and shave 128kon both the Up/Down for the VoIP traffic. I also want to make sure I don't exceed the inbound and outbound thresholds.I''m using a 5505 Security Plus?

View 3 Replies View Related

Cisco Firewall :: Unable To Launch ASDM Over WAN - ASA 5505

Jan 9, 2013

Remote LAN pool is configured as inside. Route is proper. I am able to open 443 port from the remote LAN pool on the ASA. That means, the port is open from the remote pool. No response if I try https on the browser.

View 11 Replies View Related

Cisco Firewall :: ASA 5505 / Unable To Get Internet When Using DHCP?

Jun 28, 2011

I found a tricky task for our ASA 5505 firewall. I am not able to go internet when using DHCP but I can access by using fixed IP address in client PC.Same IP, Same Mask, Same DNS, Same Gateway. All the same but no hope. Any configuration i missed in firewall?

View 5 Replies View Related

Cisco Firewall :: ASA 5505 - Unable To Connect To The Internet

Mar 8, 2011

I'm unable to have any internet connection for my new setup.
 
here's the overview.
  
Current setup is
 
Internet -> Router -> PIX 501 -> Switch -> clients
 
Internet -> static ip given is 210.193.34.1 - 210.193.34.6
Router -> Static ip assigned for NAT/External is 210.193.34.1, Local ip is 192.168.1.246
PIX 501 setting ->
IP to Router, According to router screen is 210.193.34.2, but not sure what settings are done in the PIX itself as I'm unable to access it.
 
local ip is 192.168.1.1
Clients - > 192.168.1.0
 
Old setup is working fine and connected to internet. for the new setup, as i do not want any downtime for the old setup.
As you can see, there are two firewalls connected concurrently to the router. I've configured it this way.
 
Internet -> Router -> ASA 5505 -> Switch -> clients
 
ASA 5505 setting ->
IP to Router NAT/External/ Outside Interface, 210.193.34.6 (Or do i set as 192.168.1.0?),
local ip/ Inside Interface is 192.168.2.1
Clients - > 192.168.2.0
 
some setup details.
security policy, NAT, set to default. routing is route outside 0.0.0.0 0.0.0.0 210193.34.6
 
I'm unable to access after a week of troubleshooting.

View 7 Replies View Related

Cisco Firewall :: ASA 5505 - Unable To Assign IP To DMZ Vlan Interface

Oct 26, 2012

I have ASA  5505 with base license. I created 3rd  vlan on it.it was created. but i am unable to assign IP to it. i assign ip address it takes it. But when i do sh int ip brief it does not show any ip.
 
Code...

View 7 Replies View Related

Cisco Firewall :: Unable To Use Public Server Function ASA 5505 9.1

May 23, 2013

i can't get it working to expose on internal server to an outside interface.I used the public server function in ASDM.Internet access works if i nat my private adress to one of the available ipadresses provided by our isp.
 
Internal Server : owncloud 172.10.0.4
External Server : ext181 46.245.171.181
 
I can't see the error in the configuration,
 
: Saved
:
ASA Version 9.1(1)
!
hostname rhedetest
domain-name xxxxx.de
enable password 59t92OvRofWL9yf3 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted

[code]....

View 10 Replies View Related

Cisco Firewall :: Unable To Allow Inbound ICMPv6 On ASA 5505 Version 9.1

Nov 22, 2012

I have upgraded an ASA 5505 to 9.0(1) as I would like to use ipv6 version of dhcprelay. That said, I am unable to obtain a global unicast address but the link-local address is able to communication with the ISP's gateway/DHCP provider which I hope will allow v6 dhcprelay provide internal clients with IP's from the ISP. Trouble is, unsolicated inbound ICMPv6 messages from the ISP's gateway are being dropped on the way into outside interface.
 
%ASA-3-313008: Denied IPv6-ICMP type=129, code=0 from fe80::201:5cff:fe3b:3c41 on interface outside
%ASA-3-313008: Denied IPv6-ICMP type=131, code=0 from fe80::201:5cff:fe3b:3c41 on interface outside
%ASA-3-313008: Denied IPv6-ICMP type=131, code=0 from fe80::201:5cff:fe3b:3c41 on interface outside
[Code]...

View 4 Replies View Related

AAA/Identity/Nac :: Possible To Send VSA From Radius Server To ASA-5505

Oct 26, 2009

Wondering if it's possible to send a VSA from my radius server to my ASA-5505 that will instruct the ASA to use one of several split tunnel lists I have created, based on the user name supplied in the Radius request.For example, I can send a VSA of "ip:inacl#1=permit ..." and the ASA will dynamically create an access-list for that user.Is there a similar VSA for split tunnel?

View 8 Replies View Related

Cisco Firewall :: Unable To Setup VPN Between Windows 2008 Server R2 And ASA 5505?

Sep 9, 2012

I have assigned a task to configure a vpn between windows 2008 server and cisco asa 5505, what kind of vpn should i go with as the windows 2008 server r2 is on cloud and is it possible to configure site-to-site vpn for this network senario or not.. i have try ikev1/ipsec remote access vpn with l2tp with (CHAP, MS-CHAP v2) and couldn't find any document which will allow me to configure windows 2008 server to behave a client and connect it to asa, well what i did is that i configured a dail-up connnect with l2tp and found the following debug message
 
Sep 09 20:04:02 [IKEv1 DEBUG]IP = 172.16.32.5, Oakley proposal is acceptable
Sep 09 20:04:02 [IKEv1 DEBUG]IP = 172.16.32.5, IKE SA Proposal # 1, Transform # 1 acceptable  Matches global IKE entry # 1

[Code].....

View 1 Replies View Related

Unable To Send Email

Jul 30, 2011

I am having almost an Identical issue. It seems that I can do anything I want on the internet, but the second I open hotmail all the problems start. Issues occur on both FF and IE. As with you I am able to continue to get some information on sites that are currently open (for example I will get incoming IMs, although I cannot send replys, and my stream on facebook continues to update). Once this happens I cannot open any new webpage or use the wireless on ANY other device in my house (iphones and printer); wired devices seem to have no issues. I have done everything as far as resetting, updating firmware etc to my router with no luck. I have a netgear dual band router, computers with Windows 7 64bit. It seems that accessing Hotmail on the iphones does not trigger the same issue...

View 4 Replies View Related

Unable To Send Emails

Feb 6, 2012

I can receive emails, but I cannot send emails.

View 1 Replies View Related

Cisco Firewall :: 5505 - Users Unable To Access External Email Servers ASA?

Nov 28, 2011

I have a issue that i am at a loss as how to solve it. I have an ASA 5505 as my firewall. I have users from other companies who visit from time to time and are unable to use their outlook email to send messages. They can however receive messages without a problem. I also have a situation where users who use windows live to access gmail are unable to send messages.
 
I have narrowed it down to the fact that these uses are using  ssl/tls to send the mails. I did some research and found out about the inspect esmtp setting in the ASA.  I have disabled it and i still have to problem. I have also removed all outbound deny statements and still no luck.
 
Of note is that i can send emails without attachments. They take a long time to go out ( from minutes to hours) but eventually they do. Emails with attachments of even 10k do not go at all.
 
I was running image 8.2.3 and i downgraded to 8.0.5...still did not work...i upgraded to 8.4.3...still did not work. I am now back at 8.2.3.
 
My Firewall config is attached. I am at my wits end as to what else to try. The company has not renewed support for the device so i am on my own here!

View 2 Replies View Related

Cisco Firewall :: Unable To Access Remote Network After Connecting ASA 5510 And 5505

Sep 24, 2011

I am using two firewalls to connect two different offices. Firewall 5510 is running ASDM 6.3 and 5505 is running ASDM 6.2, Problem is that even after connecting two sites, i am unable to ping remote network from either side. I am mentioned static route as tunneled.

View 1 Replies View Related

Unable To Send Files To FTP Server

Aug 14, 2012

I have a server with two adapters: 192.168.1.200 and 10.99.1.200, 10.99.1.200 connects to a cisco router 10.99.1.254 (which I have no access to). This connects via WAN to another network to transfer files to another company. 192.168.1.200 is connected to our local LAN. I have a service that uses FTP to get and send files to a server through 10.99.1.200. I recently had to switch our IP scheme from 10.99 to 192.168 and since then haven't been able to send files to the ftp server. My question is, would a router solve my problem? If so, would I; remove the 10.99 adapter, connect 192.168 to the router, connect the router to the switch, connect the 10.99 gateway to the new router (and update any appropriate routing tables on the server)? The service appears to have issues with using a dual homed server and updating it isn't going to happen anytime soon.

View 3 Replies View Related

Unable To Send Emails When Connected To Vpn

Sep 14, 2012

Unable to send emails when connected to vpn.if vpn is disconnected can able to send receive mails but when connected to vpn Unable to send emails.from outlook or any other mail.

View 3 Replies View Related

D-link Dir-601 :: Unable To Send Wifi To Multiple Computers

Feb 9, 2012

I have a Mac, and my wife has a PC running Windows 7. Since we moved into our new house, our Dlink DIR-601 does not seem to want to send Wi-Fi to both computers at the same time. One of the computers always seems to lag or not have internet connection at all. The Mac also seems to work better and more often than the PC when both are trying to access wi-fi.

I have messed with the channel settings, security, and most other typical settings on the router to no avail. Is there a setting I'm missing or should I enable certain settings that will allow both computers to have the same signal strength and reliability.

View 5 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved