Hi,
A few weeks ago the firewall team had upgraded the Pix to 7.1. Since then I had noticed several errors with the mail coming into the company, and several MTAs round the network were having real trouble talking to our main mailserver.
I tried some tests and noticed very odd behaviors with the mailservers
- i.e, advertising ehlo responses that they shouldn't be, and generally blocking specific commands etc.
I realized that the Pix was the issue and got the ESMTP inspection switched off, only to realize later that several hundred messages over the last week had gone to our secondary (presumably because there was a protocol error with the primary), and that our secondary couldn't talk to the primary! Luckily our secondary holds mail for several days, but still not the best situation to be in!
My question is is anyone else actually using this feature, and what is it doing in a production setup? We have since also had to turn off Skinny inspection, as VOIP packets going through the Pix are causing issues also (causing Cisco IPT kit to disconnect from the Call Manager etc).
Thanks. Andrew.