disabling POP3 on Pix 501

[blackrabbit]

Right now I have smtp and pop3 open on my pix.

If I take out the access-list INBOUND command for POP3 and leave the one for SMTP will our email still work?

Our ISP forwards email to our email server inside our firewall.

 

[dx1]

POP3 is used if you have clients from the outside that needs to retrieve emails from your server. SMTP is used for email delivery from server to server.
So yes, it will still work.

 

[blackrabbit]

Thanks it worked like a charm. This was the reason we wanted it turned off so people couldn't come in from like

http://www.mail2web.com

and get to our email server. All users who need email from outside our offices use cisco vpn client to establish a connection.

Also do you know of a good book on PIX firewalls? When I came on as the LAN admin here I had to learn pix boxes as i went. Cisco's web site and TAC center is usefull and helpfull but I want something I can have at the ready when i need it in a bind.

Thanks again.

 

[dx1]

Here's a couple of books on the PIX:

http://www.bookpool.com/.x/qztgtaxoy1/ss/1?qs=cisc+pix

I personally have the one by David Chapman but have not read it since I bought it over a year ago.