Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Whenever I try to connect to another mail server from my ubuntu box on port 25 I receive

220 ********************************

Any ideas why this would happen?

share|improve this question
up vote 5 down vote accepted

I see that behavior when you are running the mail server behind a Cisco Pix/ASA running SMTP fixup/inspect maps. If this is the case if you turn it off the message won't be blanked out. Exchange 2003 in particular does NOT like this behavior.

share|improve this answer
Drat... I got a phone call and you beat me to it. +1... – Evan Anderson Jul 24 '09 at 18:02
Awesome! This was no where else on the Internet that I could find it! – Brian G Jul 24 '09 at 18:10
@Evan: Common let other people get some rep :) @Brian: Yea I learned the hard way about that one ... when I was consulting and the consultant on the other end kept blaming my systems for the exchange servers not being able to talk! – Zypher Jul 24 '09 at 18:22
The postfix-users mailing list has several posts on fixup:… – markdrayton Jul 24 '09 at 18:59

To add on to the above post, this is as I understand it at least partially a security feature to prevent spammers etc. from determining the name of your mail server. You should be able to pass traffic even with a 220 response, what the Cisco Firewall fixup does is basically restrict usage commands to strict SMTP protocol standards, Have you actually tried passing traffic? We did have an instance here where turning the fixup off was necessary, but I have also seen it at other sites where it was not necessary to turn it off.

share|improve this answer
Cisco PIX SMTP fixup makes SMTP less useful by effectively disabling ESMTP. Or it did when I last looked. It's almost never necessary or useful in front of a Real MTA. – Rob Chanter Jul 26 '09 at 12:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.