Allow a Range of external SMTP Hosts

Try using access lists. If you need help configuring them, please post a sanitized (no real IPs or passwords) version of your 'show run' and I'm sure someone will be glad to give you some suggestions. Without knowing how your current access lists (if any) are configured, I can't give you too much more information than that.

Garrick

Ferret mumbled:

Apply an access list on your inbound interface.

Something like this should work

access-list 102 permit tcp host eq 25 access-list 102 permit tcp host eq 25 access-list 102 deny tcp any any eq 25 access-list 102 permit ip any any

You'll need to check into the command reference for the exact syntax - I'm a little rusty - but then simply apply that to the inbound traffic on your external interface by doing

interface access-class 102 in

That should stop anything but the list of allowed hosts (you can put more than two, but remember, the longer the list, the harder the router has to work to process it) to connect to your destination host, and only your destination host, on port 25 without blocking any other IP reaffic at all.

DaZZa

HI thanks for the Post

I have tried the following

On the dialer Interface added no ip access-group 111 in

and then added the access-list as follows

access-list 111 permit tcp host host eq 25 access-list 111 permit tcp host host eq 25 access-list 111 permit tcp host host eq 25 access-list 111 permit tcp host host eq 25 access-list 111 permit tcp host host eq 25 access-list 111 permit tcp host host eq 25 access-list 111 deny tcp any any eq 25

However I only receive Mail from the first listed host ?????

Any assistance would be appreciated..

Ops I should have said the dialer Interface ip access-group 111 in