I am publishing smtp service to the wan on the outside interface. I need to block a couple of ranges of ip. What would I need to do to accomplish this?
Thanks in advance
PIX 501 Access Rules
Nov 11, 2008
3 Replies
access-list out2in deny tcp host X.Y.Z.W host PUBLICIP eq smtp access-list out2in deny tcp P.Q.R.0 255.255.255.0 host PUBLICIP eq smtp access-list out2in permit tcp any host PUBLICIP eq smtp
The ACL's are read from top down so you would need to place the deny statements at the top of the config.
access-list Internet_access_in line 2 extended deny tcp 58.10.0.0
255.254.0.0 any eq smtpaccess-list Internet_access_in line 2 extended deny tcp 58.8.0.0
255.254.0.0 any eq smtpaccess-list Internet_access_in line 2 extended deny tcp 124.0.0.0
255.0.0.0 any eq smtpaccess-list Internet_access_in line 2 extended deny tcp 85.176.0.0
255.248.0.0 any eq smtpaccess-list Internet_access_in line 2 extended deny tcp 41.0.0.0
255.0.0.0 any eq smtpaccess-list Internet_access_in line 2 extended deny tcp 83.0.0.0
255.0.0.0 any eq smtpaccess-list Internet_access_in line 2 extended deny tcp 202.0.0.0
255.0.0.0 any eq smtpaccess-list Internet_access_in line 2 extended permit tcp any X.X.X.X eq smtp
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required