Cisco Bug: CSCsh33982 – (E)SMTP Multiple Content-Type headers check is wrong

Last Modified

Sep 23, 2017

Products (1)

• Cisco ASA 5500-X Series Firewalls

Known Affected Releases

7.2(1.25) 7.2(2)

Description (partial)

Symptom:
   
 The SMTP inspection make checks of the header Content-Type and limits it to
 one in the header section and one in the data section.The body of a SMTP packet
 may be dropped by the security appliance in some scenarios. dropped from an
 SMTP communication.  The client retransmits until it gives up. 
   
  Conditions:
   
  These symptoms are experienced if SMTP inspection is enabled in the Cisco
  PIX/ASA security appliance.

Related Community Discussions

Turning off ESMTP inspection in the ASAWe have an ASA5550 running 7.2 code and we have had to turn off the inspect esmtp to get all mail to pass. At first, I thought maybe an extended command that wasn’t supported was the problem, but this is the synopsis from our server guy: The SMTP problem was not a command level problem. It appears that the firewall was rejecting the SMTP session mid-transaction. At times I would see our server issue a 354 (ok, send the body) response to the client and then I wouldn’t see anything further from the …Latest activity: Oct 31, 2007

Source : https://quickview.cloudapps.cisco.com/quickview/bug/CSCsh33982