Create Access-list to PIX 515E

[ebouza70]

Good afternoon fellow Tek-Tippers,

I need to open up ports 389 and 3268 on the PIX so my spam appliance can query our Exchange server. Can someone please lead in the right direction in creating the access list. Thank you in advance for all your help.

Erick B
MCSE

 

[brianinms]

Where does your spam appliance and mail server reside in relation to your firewall?

 

[ebouza70]

Brianinms,

Both the Exchange server and appliance reside on the inside of the firewall.

I believe that the following access list is correct but please let me know.

access-list access_in permit udp any host 10.201.1.11 eq 389
access-list access_in permit udp any host 10.201.1.11 eq 3268

Thanks in advance,

Erick B
MCSE

 

[brianinms]

If they are both inside the firewall than neither of them traverse the firewall to talk to each other.

 

[burtsbees]

Are you using the firewall to route, I.E., do the spam appliance and the Exchange server reside on different subnets, and get routed by the PIX?

Burt