cisco pix防火牆接管smtp的問題,Outlook express不能傳送郵件

客戶端,用OU或FOXMAIL ,傳送郵件,報錯:

由於伺服器拒絕接受發件人的電子郵件地址，這封郵件無法傳送。發件人的電子郵件地址是”。 主題 '我的', 帳戶: , 伺服器: 'mail.cctv.net', 協議: SMTP, 伺服器響應: '536 authentication failed.', 埠: 25, 安全(SSL): 否, 伺服器錯誤: 536, 錯誤號: 0x800CCC78

[@more@]

經測試, 透過WEB方式,進行收發郵件正常,但透過OU或FOXMAIL,能收郵件,但不能發郵件.

檢查伺服器服務,監聽,都正常.
GOOGLE : 536 authentication failed
網上都說是客戶端配置問題. 可本人堅信客戶端配置正常.

繼續找服務端的問題....

把MAIL服務重灌...

結果還是一樣.

TELNET MAIL.cctv.net 25
220 ***************0***************** >
ehlo localhost >
502 Error: command not implemented >
helo >
502 Error: command not implemented

發現,25埠不正常

還是GOOGLE :telnet error command not implemented

終於找到了我要的答案:
-------------------------------------------------------------

cisco pix防火牆接管smtp的問題
出處： 作者： 時間：2007-1-4 14:31:00
現象：
telnet

mail.aaaaaaaaaaaaaa.com 25
Trying ddd.ddd.ddd.ddd…
Connected to mail.aaaaaaaaaaaaaa.com.
Escape character is ‘^]’.
220 ****0**********************************
ehlo aaaaaaaaaaaaaa.com
502 Error: command not implemented
helo aaaaaaaaaaaaaa.com
250 mail01.aaaaaaaaaaaaaa.com
ehlo aaaaaaaaaaaaaa.com
502 Error: command not implemented

連線後出現
220 ****0**********************************
並且不支援ESMTP

解決辦法：
no fixup protocol smtp 25

If you’re getting the *** banner, and EHLO not recognised and you have a PIX
in the way, it’s fixup, and there’s nothing else you can do. To give ammo if
you need it, Cisco deprecated fixup in v7 of the PIX OS, due to it not
understanding anything beyond RFC 821.

From their own docs:
The fixup protocol smtp command enables the Mail Guard feature. This restricts
mail servers to receiving the seven minimal commands defined in RFC 821,
section 4.5.1 (HELO, MAIL, RCPT, DATA, RSET, NOOP, and QUIT). All other
commands are rejected.

Microsoft Exchange server does not strictly comply with RFC 821 section 4.5.1,
using extended SMTP commands such as EHLO. PIX Firewall will convert any such
commands into NOOP commands, which as specified by the RFC, forces SMTP
servers to fall back to using minimal SMTP commands only. This may cause
Microsoft Outlook clients and Exchange servers to function unpredictably when
their connection passes through PIX Firewall.

You have a Cisco firewall with the SMTP fix-up feature enabled.
Turn it off.
-------------------------------------------------------------------

在防火牆上取消繫結後,能正常透過OU傳送郵件了.
TELNET也正常了:
220 ESMTP on ........ ready.

結束.