Access list on PIX 515E 2

[ebouza70]

Good afternoon,

I need to create an access list to open ports 389 and 3268 on my PIX 515E, so my spam appliance can query our Exchange server. Would the folowing command be correct
access-list access_in permit udp any host 10.201.1.11 eq 389
access-list access_in permit udp any host 10.201.1.11 eq 3268

Thank you in advance for your help.

Erick B
MCSE

 

[NetworkGhost]

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080862017.shtml

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx

 

[NetworkGhost]

You ACLs look ok. From which interface to which interface is this traffic going?

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx

 

[ebouza70]

NetworkGhost,


Good afternoon, thank you for replying so quickly. Both interfaces our internal. I hope that is what you were asking.

Erick B
MCSE

 

[NetworkGhost]

Looks good to me. Is the SPAM appliance on a high or lower security level interface?

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx

 

[ebouza70]

NetworkGhost,

Quick question the ip in the access list is of my spam appliance, I think it should be my Exchange servers ip?

access-list access_in permit udp any host 10.201.16.5 eq 389
access-list access_in permit udp any host 10.201.16.5 eq 3268

Thanks,

Erick B
MCSE

P.S. Have a great weekend

 

[NetworkGhost]

Yes it should be the Exchange Server

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx

 

[ebouza70]

NEtworkGhost,

Good morning, how would I go about to remove an access-list?

 

[normntwrk]

type in :
no access-list access_in permit udp any host 10.201.16.5 eq 389