ASA5505 Configuration Question

We are using an ASA5505 as a firewall in a branch office.

Here is an example of my access list and nat configuration. THis allows pop3 and smtp to come in to the mail server from the Internet.

access-list outside_access_in extended permit tcp any interface outside eq pop3 access-list outside_access_in extended permit tcp any interface outside eq smtp

static (inside,outside) tcp interface pop3 192.168.1.5 pop3 netmask

255.255.255.255 static (inside,outside) tcp interface smtp 192.168.1.5 smtp netmask 255.255.255.255

This is a small branch and they do not have internal DNS and must use public DNS. As a result they cannot connect to their internal mail server from inside using the public address.

Is there something I can add to the ASA5505 to allow this?

Thanks

read more and respond »

Posted 5 years ago by tman in Cisco Systems

Report misuse