|
Posted by RG on June 19, 2008, 12:26 am
Please log in for more thread options
I am publishing smtp server on internet ... "access-list inbound permit tcp
any interface outside eq smtp". I have a group of ip ranges that I would
like to deny access to port 25. How would I do that?
Thanks in advance
|
|
Posted by Walter Roberson on June 19, 2008, 9:21 am
Please log in for more thread options
>I am publishing smtp server on internet ... "access-list inbound permit tcp
>any interface outside eq smtp". I have a group of ip ranges that I would
>like to deny access to port 25. How would I do that?
Before that line, do (e.g.)
access-list inbound deny tcp 61.0.0.0 255.0.0.0 interface outside eq smtp
to block all of 61.*.*.*
Chances are, though, that you have no resources that those hosts
-should- be allowed to access, in which case you could simplify to
access-list inbound deny ip 61.0.0.0 255.0.0.0 any
|
| Similar Threads | Posted |
| PIX 501 Server Publishing | June 19, 2008, 12:26 am |
| Publishing internal VPN Server through a Cisco 827 ADSL Router | January 29, 2007, 1:36 am |
| Publishing a public IP behind an ASA 5510 | February 15, 2008, 2:38 am |
| Importing a certiticate server on CSS 11503 with SSL module from RSA KEON server | April 21, 2006, 12:54 pm |
| URGENT! PIX 501, Timeout between outside server and inside server | October 12, 2005, 10:38 am |
| Cisco DHCP server and Microsoft DNS server | September 11, 2007, 4:02 am |
| WWW server in DMZ, SQL Server Inside...newbie help needed | January 17, 2008, 8:11 pm |
| server to server communications behind CSS 11501 | January 6, 2006, 2:10 pm |
| ASA5510 dmz mail server forwarding to lan mail server | April 25, 2007, 1:07 pm |
| Setting up a router with 29 Global IPs, BUT can't ping router internal interface from server or server interface from router | December 11, 2005, 10:37 am |
| 837. Unable to see internal web server from internal server. | March 5, 2006, 8:52 am |
| pix 501 as vpn server | September 30, 2005, 2:23 pm |
| SSH server on PIX. | June 23, 2005, 10:10 am |
| DNS behind ASA server | January 22, 2007, 12:24 pm |
| NTP Server | May 30, 2007, 7:53 pm |
PIX 501 Server Publishing
Yahoo!
Google
Windows Live
del.icio.us
digg
Netscape
>any interface outside eq smtp". I have a group of ip ranges that I would
>like to deny access to port 25. How would I do that?