I am publishing smtp server on internet ... "access-list inbound permit tcp any interface outside eq smtp". I have a group of ip ranges that I would like to deny access to port 25. How would I do that?
Thanks in advance
PIX 501 Server Publishing
Jun 19, 2008
1 Replies
Before that line, do (e.g.)
access-list inbound deny tcp 61.0.0.0 255.0.0.0 interface outside eq smtp
to block all of 61.*.*.*
Chances are, though, that you have no resources that those hosts
-should- be allowed to access, in which case you could simplify to
access-list inbound deny ip 61.0.0.0 255.0.0.0 any
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required