Cisco Pix 506e

[Mac2118]

Hello everyone.

We've been having difficulties with getting put on spam lists and we're worried that someone has a virus out there spamming, so I want to block port 25 on ALL computers EXCEPT the exchange server and the spam server.

I was thinking the psudocode would resemble the following:

tcp deny all eq smtp
tcp allow 192.168.1.81 eq smtp
tcp allow 192.168.1.106 eq smtp

I know what I want to do, I just don't know how to go about doing this. I've tried searching online to find the solution to this problem and have come up empty.

does anyone have any ideas on how to go about this?

 

[Supergrrover]

This should do the trick

access-list allow-outbound permit tcp host 192.168.1.81 any eq smtp
access-list allow-outbound permit tcp host 192.168.1.106 any eq smtp
access-list allow-outbound deny tcp any any eq smtp
access-list allow-outbound permit ip any any
access-group allow-outbound in interface inside



Brent
Systems Engineer / Consultant
CCNP, CCSP