configure nat on the firewall to block

kmcilvaine · ‎08-01-2008

I am having an issue with some spam...I would like to configure nat to block utbound connections to the internet on port 25 unless it comes from my mail server

andrew.prince · ‎08-02-2008

Keith,

I would write an outbound ACL on you inside interface. something like:-

access-list inside_out permit tcp host any eq 25

access-list inside_out deny tcp x.x.x.x y.y.y.y any eq 25

access-list inside_out permit ip any any

access-list inside_out permit icmp any any

x.x.x.x = internal IP subnet

y.y.y.y = internet subnet mask

HTH>