Catalyst 4507 ACL Help

[stugatza]

I have 3 vlans. 1 is private, 1 is DMZ, the last is public wireless.

I am trying to write ACL's so that my dmz can reach the private network for a few services such as smtp.

i wrote the following and applied it ingress to the DMZ Vlan. However, i tried testing this by telnetting on port 25 on 192.168.1.21 to 10.0.0.150 and had no luck. any help is appreciated

access-list 101 remark regulate inbound traffic for dmz_192.168.1.x
access-list 101 permit tcp host 10.0.0.150 eq smtp host 192.168.1.21 eq smtp
access-list 101 permit tcp host 10.0.0.36 eq 389 host 192.168.1.21 eq 389
access-list 101 permit tcp host 10.0.0.36 eq 636 host 192.168.1.21 eq 636
access-list 101 permit tcp host 10.0.0.36 eq 3268 host 192.168.1.21 eq 3268
access-list 101 permit tcp host 10.0.0.36 eq 3269 host 192.168.1.21 eq 3269

 

[Zen37]

for this configuration to work, you need to have the same source port as the destination port. Are you sure your telnet session has a source port of TCP25?