Static statement kills outgoing email

[hrswift]

I'm trying to add a static statement to my PIX515e as follows:
static (inside,outside) 150.176.6.142 192.168.1.86 netmask 255.255.255.255 0 0

I have the access list as follows:
access-list FROM_OUTSIDE line 96 permit tcp any host 150.176.6.142 eq https

As soon as I add the static entry, my email stops going out. I can see it sitting in the Exchange queue saying "The remote server did not respond to a connection attempt". It still works internally and outside email still comes in.

Any ideas?

 

[NetworkGhost]

Where is your MX record pointing? Where is the reverse ptr record pointing? Same IP as the static?

 

[hrswift]

The MX record is pointing to 150.176.6.132
The A record is pointing to 150.176.6.142

 

[NetworkGhost]

Do you currently not have a static address setup?

You need to have a PTR Record for 150.176.6.142. That goes in your reverse zone.

 

[hrswift]

I do not currently have a static entry in. I can to test. Email will be delivered when I remove it.


I see no PTR record for 150.176.6.142. I have no PTR for 150.176.6.131 either. Thats my old Exchange 5.5 server. I added the entries for the new one (different IP addresses) just like the old exchange.

 

[NetworkGhost]

My thinking was that alot of mail servers do reverse look ups to avoid spam. Without a valid ptr most mail will never get delivered. Another issue could be the fixup protocol smtp. Actually I should kick myself in the face for not mentioning it earlier.

I assume your new mailserver is not 5.5 and possibly 2000 or 2003. The problem is that 2000 and 2003 uses ESMTP. The Pix version 6.3 and below has a smtp inspect that only allows smtp commands through. To bypass this you will need to do:

no fixup protocol smtp

I am 99.9% sure this will solve your problems.

 

[hrswift]

The new server is 2003. The statement "no fixup protocol smtp 25" is in the PIX already.

 

[NetworkGhost]

Ok. Can you post your config?

 

[hrswift]

: Saved
:
PIX Version 6.3(4)
interface ethernet0 100full
interface ethernet1 100full
interface ethernet2 auto shutdown
clock timezone EST -5
clock summer-time EDT recurring
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol pptp 1723
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
no fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
object-group service denytcp tcp
port-object range 3127 3198
port-object eq pop2
port-object eq irc
port-object eq 37
port-object eq 81
port-object eq 123
port-object eq 220
port-object eq 1214
port-object eq 1863
port-object eq 3128
port-object eq 4474
port-object eq 4662
port-object eq 5050
port-object eq 5191
port-object eq 5192
port-object eq 5193
port-object eq 6345
port-object eq 6346
port-object eq 6347
port-object eq 6348
port-object eq 6349
port-object eq 6355
port-object eq 6450
port-object eq 6699
port-object eq 7777
port-object eq 8768
port-object eq 8875
port-object eq 8888
port-object eq 777
port-object eq 2846
port-object eq 2847
port-object eq 4099
port-object eq 7668
port-object range 2300 2320
port-object eq 1027
port-object eq 1029
port-object eq 1032
port-object eq 4250
port-object eq 4590
port-object eq 4950
port-object eq 6772
port-object eq 19864
port-object eq 5010
port-object eq 445
port-object eq 9996
port-object eq 5554
port-object eq 1022
port-object eq 1023
port-object eq 69
port-object eq 3332
object-group service denyudp udp
port-object range 3127 3198
port-object eq time
port-object eq 1214
port-object eq 4665
port-object eq 5190
port-object eq 5191
port-object eq 5192
port-object eq 5193
port-object eq 6257
port-object eq 6346
port-object eq 6347
port-object eq 8998
port-object eq 777
port-object eq 2846
port-object eq 2847
port-object eq 4099
port-object eq 7668
port-object range 2300 2320
port-object eq 1027
port-object eq 1029
port-object eq 1032
port-object eq 4250
port-object eq 4590
port-object eq 4950
port-object eq 6772
port-object eq 19864
port-object eq 5010
object-group network denysvrs
network-object host 12.158.139.10
network-object host 24.73.55.18
network-object host 24.103.112.18
network-object host 38.117.132.200
network-object host 61.240.131.191
network-object host 61.251.190.247
network-object host 63.175.146.12
network-object host 63.175.146.18
network-object host 63.175.146.19
network-object host 63.175.146.25
network-object host 63.175.146.42
network-object host 64.38.198.12
network-object host 64.38.198.15
network-object host 64.38.232.92
network-object host 64.38.232.95
network-object host 64.124.41.39
network-object host 64.152.64.69
network-object host 65.92.89.216
network-object host 66.84.242.55
network-object host 68.5.8.84
network-object host 68.97.116.232
network-object host 68.98.62.2
network-object host 68.102.79.211
network-object host 68.65.238.48
network-object host 68.81.141.205
network-object host 69.42.72.29
network-object host 69.63.161.233
network-object host 128.121.26.135
network-object host 128.121.26.136
network-object host 128.121.26.137
network-object host 128.242.104.137
network-object host 157.130.197.206
network-object host 200.139.104.3
network-object host 201.3.240.234
network-object host 202.104.237.157
network-object host 206.204.187.12
network-object host 208.239.76.98
network-object host 208.253.59.171
network-object host 208.253.59.172
network-object host 208.253.59.173
network-object host 208.253.59.174
network-object host 208.253.59.175
network-object host 208.253.59.176
network-object host 209.133.120.90
network-object host 211.158.15.58
network-object host 213.248.107.10
network-object host 213.248.112.35
network-object host 216.194.67.88
network-object host 218.16.121.18
network-object host 220.164.144.154
network-object host 221.5.251.149
network-object host 221.5.251.202
network-object host 221.143.42.168
network-object host 222.233.52.93
access-list nat permit ip 10.105.1.0 255.255.255.0 any
access-list nonat permit ip 10.105.1.0 255.255.255.0 10.0.0.0 255.0.0.0
access-list nonat permit ip 172.17.2.0 255.255.255.0 10.0.0.0 255.0.0.0
access-list nonat permit ip 10.0.0.0 255.0.0.0 172.17.2.0 255.255.255.0
access-list crypto permit ip 10.105.1.0 255.255.255.0 192.168.0.0 255.255.0.0
access-list crypto permit ip 10.105.1.0 255.255.255.0 10.0.0.0 255.0.0.0
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE remark *** ACL FOR OUTSIDE INT ***
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE remark *** Bogon address blocking ***
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE deny ip 0.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 1.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 2.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 5.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 7.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 10.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 23.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 27.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 31.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 36.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 37.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 39.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 42.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 49.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 50.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 77.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 78.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 79.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 92.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 93.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 94.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 95.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 96.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 97.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 98.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 99.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 100.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 101.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 102.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 103.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 104.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 105.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 106.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 107.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 108.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 109.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 110.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 111.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 112.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 113.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 114.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 115.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 116.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 117.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 118.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 119.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 120.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 121.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 122.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 123.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 127.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 169.254.0.0 255.255.0.0 any
access-list FROM_OUTSIDE deny ip 172.16.0.0 255.240.0.0 any
access-list FROM_OUTSIDE deny ip 173.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 174.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 175.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 176.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 177.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 178.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 179.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 180.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 181.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 182.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 183.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 184.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 185.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 186.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 187.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 192.0.2.0 255.255.255.0 any
access-list FROM_OUTSIDE deny ip 192.168.0.0 255.255.0.0 any
access-list FROM_OUTSIDE deny ip 197.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 223.0.0.0 255.0.0.0 any
access-list FROM_OUTSIDE deny ip 224.0.0.0 224.0.0.0 any
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE remark *** ICMP Filtering ***
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE permit icmp any any echo
access-list FROM_OUTSIDE permit icmp any any echo-reply
access-list FROM_OUTSIDE permit icmp any any time-exceeded
access-list FROM_OUTSIDE permit icmp any any unreachable
access-list FROM_OUTSIDE deny icmp any any
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE remark *** Permit Core-specific app-requests ***
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE permit tcp any host 150.176.6.131 eq www
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE permit tcp any eq pptp any
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE permit tcp host 199.44.72.2 host 150.176.6.133 eq lpd
access-list FROM_OUTSIDE permit tcp any host 150.176.6.142 eq www
access-list FROM_OUTSIDE permit tcp any host 150.176.6.142 eq https
access-list FROM_OUTSIDE permit tcp any host 150.176.6.131 eq https
access-list FROM_OUTSIDE permit tcp any host 150.176.6.132 eq smtp
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE remark *** Deny everything else ***
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE deny ip any any
access-list FROM_OUTSIDE remark
access-list FROM_OUTSIDE remark *** END OF ACL ***
access-list FROM_OUTSIDE remark
access-list FROM_INSIDE remark
access-list FROM_INSIDE remark *** ACL FOR INSIDE INT ***
access-list FROM_INSIDE remark
access-list FROM_INSIDE remark *** ICMP Filtering ***
access-list FROM_INSIDE remark
access-list FROM_INSIDE permit icmp 10.105.1.0 255.255.255.0 any echo
access-list FROM_INSIDE deny icmp any any
access-list FROM_INSIDE remark
access-list FROM_INSIDE remark *** Misc Port Blocking ***
access-list FROM_INSIDE remark
access-list FROM_INSIDE deny udp any any eq netbios-ns
access-list FROM_INSIDE deny udp any any eq netbios-dgm
access-list FROM_INSIDE deny udp any any eq 15118
access-list FROM_INSIDE deny udp any any eq 445
access-list FROM_INSIDE remark
access-list FROM_INSIDE remark *** Permit Any ***
access-list FROM_INSIDE remark
access-list FROM_INSIDE permit ip 10.105.1.0 255.255.255.0 any
access-list FROM_INSIDE remark
access-list FROM_INSIDE remark *** End of ACL ***
access-list FROM_INSIDE remark
pager lines 24
icmp permit 10.105.1.0 255.255.255.0 inside
mtu outside 1500
mtu inside 1500
mtu DMZ 1500
ip address outside 150.176.6.130 255.255.255.0
ip address inside 10.105.1.3 255.255.255.0
no ip address DMZ
ip audit info action alarm
ip audit attack action alarm
ip local pool ippool 172.17.2.1-172.17.2.254
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 access-list nat 0 0
static (inside,outside) 150.176.6.131 10.105.1.8 netmask 255.255.255.255 0 0
static (inside,outside) 150.176.6.132 10.105.1.9 netmask 255.255.255.255 0 0
static (inside,outside) 150.176.6.133 10.105.1.20 netmask 255.255.255.255 0 0
access-group FROM_OUTSIDE in interface outside
access-group FROM_INSIDE in interface inside
route outside 0.0.0.0 0.0.0.0 150.176.6.129 1
route outside 10.10.80.0 255.255.255.0 150.176.6.129 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute

: end

 

[NetworkGhost]

Also ensure your default gateway on your mail server is setup correctly

 

[hrswift]

Default gateway is good

 

[NetworkGhost]

Where is reference to 192.168.1.86 on your config? I dont even see a route to that network on the config. Only 10.x addresses. How is the 192.168.1.x network tied into your network?

 

[hrswift]

I'm sorry. The 192.168.1.86 is actually 10.105.1.86. Initially tried to hide real address.

 

[NetworkGhost]

Ok. Try doing a capture on the Pix

access-list 150 permit ip host 10.105.1.9 any
access-list 150 permit ip any host 10.105.1.9
access-list 160 permit ip host 150.176.6.132 any
access-list 160 permit ip any host 150.176.6.132
cap capmailin access-list 150 buffer 8000 in interface inside circular-buffer
cap capmailout access-list 150 buffer 8000 in interface outside circular-buffer

sh cap capmail in

sh cap capmail out

Post results

Then do

no cap capmailin
no cap capmailout

 

[NetworkGhost]

To see do thi sorry for the mispost

sh cap capmailin

sh cap capmailout

 

[hrswift]

pix-Atkins(config)# SH CAP capmailin
0 packet captured
0 packet shown
pix-Atkins(config)# SH CAP capmailout
93 packets captured
15:45:04.585388 212.195.118.213.1166 > 150.176.6.132.25: P 1008857206:1008857252(46) ack 1490409933 win 65335
15:45:05.071148 212.195.118.213.1166 > 150.176.6.132.25: . ack 1490409979 win 65289
15:45:05.302550 212.195.118.213.1166 > 150.176.6.132.25: P 1008857252:1008857258(6) ack 1490409979 win 65289
15:45:05.886642 212.195.118.213.1166 > 150.176.6.132.25: . ack 1490410025 win 65243
15:45:06.089305 212.195.118.213.1166 > 150.176.6.132.25: P 1008857258:1008857274(16) ack 1490410025 win 65243
15:45:06.899794 212.195.118.213.1166 > 150.176.6.132.25: P 1008857274:1008858190(916) ack 1490410025 win 65243
15:45:06.987116 204.9.88.14 > 150.176.6.130: icmp: echo request
15:45:06.987162 150.176.6.130 > 204.9.88.14: icmp: echo reply
15:45:07.037351 204.9.88.14 > 150.176.6.130: icmp: echo request
15:45:07.037382 150.176.6.130 > 204.9.88.14: icmp: echo reply
15:45:07.086512 204.9.88.14 > 150.176.6.130: icmp: echo request
15:45:07.086558 150.176.6.130 > 204.9.88.14: icmp: echo reply
15:45:07.433067 212.195.118.213.1166 > 150.176.6.132.25: . ack 1490410107 win 65161
15:45:07.790745 212.195.118.213.1166 > 150.176.6.132.25: P 1008858190:1008858196(6) ack 1490410107 win 65161
15:45:08.161643 212.195.118.213.1166 > 150.176.6.132.25: . ack 1490410166 win 65103
15:45:08.194798 212.195.118.213.1166 > 150.176.6.132.25: F 1008858196:1008858196(0) ack 1490410166 win 65103
15:45:12.621290 209.9.147.135.47260 > 150.176.6.132.25: S 1388654690:1388654690(0) win 5840 <mss 1460,sackOK,timestamp 191090543[|tcp]>
15:45:12.709420 209.9.147.135.47260 > 150.176.6.132.25: . ack 2599238221 win 5840 <nop,nop,timestamp 191090552 0>
15:45:12.799198 209.9.147.135.47260 > 150.176.6.132.25: . ack 2599238332 win 5840 <nop,nop,timestamp 191090561 1354570>
15:45:12.807132 209.9.147.135.47260 > 150.176.6.132.25: P 1388654691:1388654722(31) ack 2599238332 win 5840 <nop,nop,timestamp 191090562 1354570>
15:45:12.899977 209.9.147.135.47260 > 150.176.6.132.25: P 1388654722:1388654804(82) ack 2599238369 win 5840 <nop,nop,timestamp 191090571 1354571>
15:45:12.993661 209.9.147.135.47260 > 150.176.6.132.25: P 1388654804:1388654849(45) ack 2599238462 win 5840 <nop,nop,timestamp 191090580 1354572>
15:45:13.091197 209.9.147.135.47260 > 150.176.6.132.25: P 1388654849:1388654855(6) ack 2599238508 win 5840 <nop,nop,timestamp 191090590 1354573>
15:45:13.189717 209.9.147.135.47260 > 150.176.6.132.25: . 1388654855:1388656223(1368) ack 2599238554 win 5840 <nop,nop,timestamp 191090600 1354574>
15:45:13.189763 209.9.147.135.47260 > 150.176.6.132.25: P 1388656223:1388656355(132) ack 2599238554 win 5840 <nop,nop,timestamp 191090600 1354574>
15:45:13.279282 209.9.147.135.47260 > 150.176.6.132.25: . 1388656355:1388657723(1368) ack 2599238554 win 5840 <nop,nop,timestamp 191090609 1354575>
15:45:13.279404 209.9.147.135.47260 > 150.176.6.132.25: . 1388657723:1388659091(1368) ack 2599238554 win 5840 <nop,nop,timestamp 191090609 1354575>
15:45:13.279435 209.9.147.135.47260 > 150.176.6.132.25: P 1388659091:1388659466(375) ack 2599238554 win 5840 <nop,nop,timestamp 191090609 1354575>
15:45:13.378306 209.9.147.135.47260 > 150.176.6.132.25: P 1388659466:1388659548(82) ack 2599238663 win 5840 <nop,nop,timestamp 191090619 1354576>
15:45:13.475759 209.9.147.135.47260 > 150.176.6.132.25: P 1388659548:1388659593(45) ack 2599238756 win 5840 <nop,nop,timestamp 191090629 1354577>
15:45:13.573777 209.9.147.135.47260 > 150.176.6.132.25: P 1388659593:1388659599(6) ack 2599238802 win 5840 <nop,nop,timestamp 191090638 1354577>
15:45:13.672511 209.9.147.135.47260 > 150.176.6.132.25: . 1388659599:1388660967(1368) ack 2599238848 win 5840 <nop,nop,timestamp 191090648 1354578>
15:45:13.672557 209.9.147.135.47260 > 150.176.6.132.25: P 1388660967:1388661099(132) ack 2599238848 win 5840 <nop,nop,timestamp 191090648 1354578>
15:45:13.676417 209.9.147.135.47260 > 150.176.6.132.25: . 1388661099:1388662467(1368) ack 2599238848 win 5840 <nop,nop,timestamp 191090649 1354578>
15:45:13.762152 209.9.147.135.47260 > 150.176.6.132.25: . 1388662467:1388663835(1368) ack 2599238848 win 5840 <nop,nop,timestamp 191090657 1354579>
15:45:13.762182 209.9.147.135.47260 > 150.176.6.132.25: P 1388663835:1388664210(375) ack 2599238848 win 5840 <nop,nop,timestamp 191090657 1354579>
15:45:13.861420 209.9.147.135.47260 > 150.176.6.132.25: P 1388664210:1388664294(84) ack 2599238957 win 5840 <nop,nop,timestamp 191090667 1354580>
15:45:13.959773 209.9.147.135.47260 > 150.176.6.132.25: P 1388664294:1388664341(47) ack 2599239052 win 5840 <nop,nop,timestamp 191090677 1354582>
15:45:14.056820 209.9.147.135.47260 > 150.176.6.132.25: P 1388664341:1388664347(6) ack 2599239100 win 5840 <nop,nop,timestamp 191090687 1354583>
15:45:14.153678 209.9.147.135.47260 > 150.176.6.132.25: . 1388664347:1388665715(1368) ack 2599239146 win 5840 <nop,nop,timestamp 191090696 1354584>
15:45:14.153724 209.9.147.135.47260 > 150.176.6.132.25: P 1388665715:1388665847(132) ack 2599239146 win 5840 <nop,nop,timestamp 191090696 1354584>
15:45:14.157584 209.9.147.135.47260 > 150.176.6.132.25: . 1388665847:1388667215(1368) ack 2599239146 win 5840 <nop,nop,timestamp 191090697 1354584>
15:45:14.243166 209.9.147.135.47260 > 150.176.6.132.25: . 1388667215:1388668583(1368) ack 2599239146 win 5840 <nop,nop,timestamp 191090705 1354585>
15:45:14.243197 209.9.147.135.47260 > 150.176.6.132.25: P 1388668583:1388668974(391) ack 2599239146 win 5840 <nop,nop,timestamp 191090705 1354585>
15:45:14.342709 209.9.147.135.47260 > 150.176.6.132.25: P 1388668974:1388669056(82) ack 2599239257 win 5840 <nop,nop,timestamp 191090715 1354585>
15:45:14.440528 209.9.147.135.47260 > 150.176.6.132.25: P 1388669056:1388669101(45) ack 2599239350 win 5840 <nop,nop,timestamp 191090725 1354586>
15:45:14.536776 209.9.147.135.47260 > 150.176.6.132.25: P 1388669101:1388669107(6) ack 2599239396 win 5840 <nop,nop,timestamp 191090735 1354587>
15:45:14.633725 209.9.147.135.47260 > 150.176.6.132.25: . 1388669107:1388670475(1368) ack 2599239442 win 5840 <nop,nop,timestamp 191090744 1354588>
15:45:14.633771 209.9.147.135.47260 > 150.176.6.132.25: P 1388670475:1388670607(132) ack 2599239442 win 5840 <nop,nop,timestamp 191090744 1354588>
15:45:14.637936 209.9.147.135.47260 > 150.176.6.132.25: . 1388670607:1388671975(1368) ack 2599239442 win 5840 <nop,nop,timestamp 191090745 1354588>
15:45:14.723381 209.9.147.135.47260 > 150.176.6.132.25: . 1388671975:1388673343(1368) ack 2599239442 win 5840 <nop,nop,timestamp 191090753 1354589>
15:45:14.723427 209.9.147.135.47260 > 150.176.6.132.25: P 1388673343:1388673718(375) ack 2599239442 win 5840 <nop,nop,timestamp 191090753 1354589>
15:45:14.819705 209.9.147.135.47260 > 150.176.6.132.25: P 1388673718:1388673796(78) ack 2599239551 win 5840 <nop,nop,timestamp 191090763 1354590>
15:45:14.919538 209.9.147.135.47260 > 150.176.6.132.25: P 1388673796:1388673837(41) ack 2599239640 win 5840 <nop,nop,timestamp 191090773 1354591>
15:45:15.017302 209.9.147.135.47260 > 150.176.6.132.25: P 1388673837:1388673843(6) ack 2599239682 win 5840 <nop,nop,timestamp 191090783 1354592>
15:45:15.111947 209.9.147.135.47260 > 150.176.6.132.25: . 1388673843:1388675211(1368) ack 2599239728 win 5840 <nop,nop,timestamp 191090792 1354594>
15:45:15.111993 209.9.147.135.47260 > 150.176.6.132.25: P 1388675211:1388675343(132) ack 2599239728 win 5840 <nop,nop,timestamp 191090792 1354594>
15:45:15.115945 209.9.147.135.47260 > 150.176.6.132.25: . 1388675343:1388676711(1368) ack 2599239728 win 5840 <nop,nop,timestamp 191090793 1354594>
15:45:15.202107 209.9.147.135.47260 > 150.176.6.132.25: . 1388676711:1388678079(1368) ack 2599239728 win 5840 <nop,nop,timestamp 191090801 1354594>
15:45:15.202168 209.9.147.135.47260 > 150.176.6.132.25: P 1388678079:1388678422(343) ack 2599239728 win 5840 <nop,nop,timestamp 191090801 1354594>
15:45:15.297592 209.9.147.135.47260 > 150.176.6.132.25: P 1388678422:1388678503(81) ack 2599239833 win 5840 <nop,nop,timestamp 191090811 1354595>
15:45:15.393137 209.9.147.135.47260 > 150.176.6.132.25: P 1388678503:1388678547(44) ack 2599239925 win 5840 <nop,nop,timestamp 191090820 1354596>
15:45:15.488835 209.9.147.135.47260 > 150.176.6.132.25: P 1388678547:1388678553(6) ack 2599239970 win 5840 <nop,nop,timestamp 191090830 1354597>
15:45:15.587844 209.9.147.135.47260 > 150.176.6.132.25: . 1388678553:1388679921(1368) ack 2599240016 win 5840 <nop,nop,timestamp 191090840 1354598>
15:45:15.587890 209.9.147.135.47260 > 150.176.6.132.25: P 1388679921:1388680053(132) ack 2599240016 win 5840 <nop,nop,timestamp 191090840 1354598>
15:45:15.591598 209.9.147.135.47260 > 150.176.6.132.25: . 1388680053:1388681421(1368) ack 2599240016 win 5840 <nop,nop,timestamp 191090840 1354598>
15:45:15.678340 209.9.147.135.47260 > 150.176.6.132.25: . 1388681421:1388682789(1368) ack 2599240016 win 5840 <nop,nop,timestamp 191090849 1354599>
15:45:15.678385 209.9.147.135.47260 > 150.176.6.132.25: P 1388682789:1388683156(367) ack 2599240016 win 5840 <nop,nop,timestamp 191090849 1354599>
15:45:15.804386 209.9.147.135.47260 > 150.176.6.132.25: . ack 2599240124 win 5840 <nop,nop,timestamp 191090862 1354600>
15:45:20.189092 209.9.147.135.47260 > 150.176.6.132.25: P 1388683156:1388683162(6) ack 2599240124 win 5840 <nop,nop,timestamp 191091300 1354600>
15:45:20.277146 209.9.147.135.47260 > 150.176.6.132.25: . ack 2599240182 win 5840 <nop,nop,timestamp 191091309 1354645>
15:45:20.286011 209.9.147.135.47260 > 150.176.6.132.25: F 1388683162:1388683162(0) ack 2599240183 win 5840 <nop,nop,timestamp 191091310 1354645>
15:45:25.081142 209.86.89.61.37005 > 150.176.6.132.25: S 4102483660:4102483660(0) win 5840 <mss 1460,sackOK,timestamp 782296379[|tcp]>
15:45:25.101953 209.86.89.61.37005 > 150.176.6.132.25: . ack 2172253284 win 5840 <nop,nop,timestamp 782296381 0>
15:45:25.121926 209.86.89.61.37005 > 150.176.6.132.25: . ack 2172253395 win 5840 <nop,nop,timestamp 782296383 1354694>
15:45:25.121957 209.86.89.61.37005 > 150.176.6.132.25: P 4102483661:4102483701(40) ack 2172253395 win 5840 <nop,nop,timestamp 782296383 1354694>
15:45:25.142341 209.86.89.61.37005 > 150.176.6.132.25: P 4102483701:4102483801(100) ack 2172253568 win 6432 <nop,nop,timestamp 782296385 1354694>
15:45:25.193028 209.86.89.61.37005 > 150.176.6.132.25: . ack 2172253618 win 6432 <nop,nop,timestamp 782296391 1354694>
15:45:25.212986 209.86.89.61.37005 > 150.176.6.132.25: . ack 2172253710 win 6432 <nop,nop,timestamp 782296392 1354695>
15:45:25.220813 209.86.89.61.37005 > 150.176.6.132.25: . 4102483801:4102485169(1368) ack 2172253710 win 6432 <nop,nop,timestamp 782296393 1354695>
15:45:25.220935 209.86.89.61.37005 > 150.176.6.132.25: . 4102485169:4102486537(1368) ack 2172253710 win 6432 <nop,nop,timestamp 782296393 1354695>
15:45:25.241991 209.86.89.61.37005 > 150.176.6.132.25: . 4102486537:4102487905(1368) ack 2172253710 win 6432 <nop,nop,timestamp 782296395 1354695>
15:45:25.242037 209.86.89.61.37005 > 150.176.6.132.25: P 4102487905:4102488421(516) ack 2172253710 win 6432 <nop,nop,timestamp 782296395 1354695>
15:45:25.264436 209.86.89.61.37005 > 150.176.6.132.25: P 4102488421:4102488427(6) ack 2172253786 win 6432 <nop,nop,timestamp 782296398 1354695>
15:45:25.264497 209.86.89.61.37005 > 150.176.6.132.25: F 4102488427:4102488427(0) ack 2172253786 win 6432 <nop,nop,timestamp 782296398 1354695>
15:45:25.283966 209.86.89.61.37005 > 150.176.6.132.25: R 4102488428:4102488428(0) win 0
15:45:25.284027 209.86.89.61.37005 > 150.176.6.132.25: R 4102488428:4102488428(0) win 0
15:45:27.460745 67.172.19.125.4933 > 150.176.6.132.25: S 1221258753:1221258753(0) win 16384 <mss 1460,nop,nop,sackOK>
15:45:28.175787 67.172.19.125.4933 > 150.176.6.132.25: . ack 2779410357 win 16560
15:45:28.955333 67.172.19.125.4933 > 150.176.6.132.25: P 1221258754:1221258767(13) ack 2779410468 win 16449
15:45:29.891738 67.172.19.125.4933 > 150.176.6.132.25: P 1221258767:1221258800(33) ack 2779410642 win 16275
15:45:30.109872 67.172.19.125.4933 > 150.176.6.132.25: P 1221258800:1221258846(46) ack 2779410686 win 16231
15:45:30.870789 67.172.19.125.4933 > 150.176.6.132.25: P 1221258846:1221258852(6) ack 2779410733 win 16184
93 packets shown

 

[NetworkGhost]

Ok So it looks like mail is stopping at the Pix. Now to find out why.

do this

logging on
logging buffer 6

Then to show the log do

sh log

use these 2 commands to view the log


sh log | i 150.176.6.132
sh log | i 10.105.1.9

also do a general sh log. This should show us any errors that the Pix is generating.

 

[hrswift]

Headed for weekend prep meetings. Must resume Monday