issues with mail - dns

While I was out of town (anotherwords, nothing changed) we can no longer
ping.

Here is our configuration:

Windows 2003 Native DC's
Windows 2003 Member Servers
Windows XP SP2 clients running Office 2003
Cisco Pix 501 firewall

If you drop to a command line and try to tracert or ping any domain or ip,
it resolves (DNS is fine) but we can not ping anything off our network. As a
result, we can get to the internet sites, but mail (sending mail out via
POP3 to our ISP no longer works. We can get mail, but not send mail.

I have brought in a machine imaged from a different company than ours, same
thing, not able to ping. You can not ping from any dc, member server or
desktop. It I log in to the firewall, I can ping out.

I know this sounds like a firewall issue, but nothing has changed in the PIX
config in over 6 months. Also, there is a rule allowing for outbound icmp.

I have attached the Pix config just for giggles. We have been without mail
now for 2 days (sending mail out that is.

Help

Todd

Todd Hudson wrote:
> While I was out of town (anotherwords, nothing changed) we can no
> longer ping.
>
> Here is our configuration:
>
> Windows 2003 Native DC's
> Windows 2003 Member Servers
> Windows XP SP2 clients running Office 2003
> Cisco Pix 501 firewall
>
> If you drop to a command line and try to tracert or ping any domain
> or ip, it resolves (DNS is fine) but we can not ping anything off our
> network. As a result, we can get to the internet sites, but mail
> (sending mail out via POP3 to our ISP no longer works. We can get
> mail, but not send mail.

That doesn't relate to your inability to ping, specifically. You send mail
via SMTP, which uses port 25....can you telnet to an external mail server on
port 25? If not, it's your firewall, dollars to doughnuts.

>
> I have brought in a machine imaged from a different company than
> ours, same thing, not able to ping. You can not ping from any dc,
> member server or desktop. It I log in to the firewall, I can ping out.
>
> I know this sounds like a firewall issue, but nothing has changed in
> the PIX config in over 6 months. Also, there is a rule allowing for
> outbound icmp.

Again, it ain't ICMP that's the issue - that sounds like just a symptom that
other outbound traffic is being blocked somehow.
>
> I have attached the Pix config just for giggles. We have been without
> mail now for 2 days (sending mail out that is.

>
> Help
>
> Todd

I can not connect to my mail server on port 25 due to it being secure (that
is, Telnet is not running.). Do you have an IP address I can try to connect
to?

"Lanwench [MVP - Exchange]"
<(E-Mail Removed) ahoo.com> wrote in message
news:(E-Mail Removed)...
> Todd Hudson wrote:
>> While I was out of town (anotherwords, nothing changed) we can no
>> longer ping.
>>
>> Here is our configuration:
>>
>> Windows 2003 Native DC's
>> Windows 2003 Member Servers
>> Windows XP SP2 clients running Office 2003
>> Cisco Pix 501 firewall
>>
>> If you drop to a command line and try to tracert or ping any domain
>> or ip, it resolves (DNS is fine) but we can not ping anything off our
>> network. As a result, we can get to the internet sites, but mail
>> (sending mail out via POP3 to our ISP no longer works. We can get
>> mail, but not send mail.
>
> That doesn't relate to your inability to ping, specifically. You send mail
> via SMTP, which uses port 25....can you telnet to an external mail server
> on
> port 25? If not, it's your firewall, dollars to doughnuts.
>
>>
>> I have brought in a machine imaged from a different company than
>> ours, same thing, not able to ping. You can not ping from any dc,
>> member server or desktop. It I log in to the firewall, I can ping out.
>>
>> I know this sounds like a firewall issue, but nothing has changed in
>> the PIX config in over 6 months. Also, there is a rule allowing for
>> outbound icmp.
>
> Again, it ain't ICMP that's the issue - that sounds like just a symptom
> that
> other outbound traffic is being blocked somehow.
>>
>> I have attached the Pix config just for giggles. We have been without
>> mail now for 2 days (sending mail out that is.
>
>>
>> Help
>>
>> Todd
>
>

Todd Hudson wrote:
> I can not connect to my mail server on port 25 due to it being secure
> (that is, Telnet is not running.). Do you have an IP address I can
> try to connect to?

If you can't communicate with your server by telnetting to it on port 25,
you won't get any mail. That's how other servers will be communicating with
your server, too. First test on your local network - then externally.



>
> "Lanwench [MVP - Exchange]"
> <(E-Mail Removed) ahoo.com> wrote in
> message news:(E-Mail Removed)...
>> Todd Hudson wrote:
>>> While I was out of town (anotherwords, nothing changed) we can no
>>> longer ping.
>>>
>>> Here is our configuration:
>>>
>>> Windows 2003 Native DC's
>>> Windows 2003 Member Servers
>>> Windows XP SP2 clients running Office 2003
>>> Cisco Pix 501 firewall
>>>
>>> If you drop to a command line and try to tracert or ping any domain
>>> or ip, it resolves (DNS is fine) but we can not ping anything off
>>> our network. As a result, we can get to the internet sites, but mail
>>> (sending mail out via POP3 to our ISP no longer works. We can get
>>> mail, but not send mail.
>>
>> That doesn't relate to your inability to ping, specifically. You
>> send mail via SMTP, which uses port 25....can you telnet to an
>> external mail server on
>> port 25? If not, it's your firewall, dollars to doughnuts.
>>
>>>
>>> I have brought in a machine imaged from a different company than
>>> ours, same thing, not able to ping. You can not ping from any dc,
>>> member server or desktop. It I log in to the firewall, I can ping
>>> out.
>>>
>>> I know this sounds like a firewall issue, but nothing has changed in
>>> the PIX config in over 6 months. Also, there is a rule allowing for
>>> outbound icmp.
>>
>> Again, it ain't ICMP that's the issue - that sounds like just a
>> symptom that
>> other outbound traffic is being blocked somehow.
>>>
>>> I have attached the Pix config just for giggles. We have been
>>> without mail now for 2 days (sending mail out that is.
>>
>>>
>>> Help
>>>
>>> Todd