configuring ASA for PortForward SMTP to DMZ

tmssupport · ‎11-01-2008

Hi,

I'm new to ASA.

Need some help to config the ASA Firewall. I'll be installing an antispam in the DMZ and a new Mail Server in the Tusted. As such, need to forward port 25 from the External IP to the DMZ's AntiSpam IP plus to allow port 25 from DMZ to Internal.

Please advise on how I can do this.

Thanks & regards,

abinjola · ‎11-01-2008

for inbound traffic from outside to dmz

static (dmz,outside) tcp 25 25

access-l outside_acl permit tcp any host 25

access-g outside_acl in interface outside

For communication between dmz and inside

static (inside,dmz)

private ip-->ip address of internal exchange server

access_list dmz_acl permit tcp any host eq 25

tmssupport · ‎11-01-2008

Thanks for the reply. Will try this.

By the way, we have a Active-Passive ASA cluster. By changing the above on the Active unit, will the change be automatically added to the Passive unit ?

regards,

abinjola · ‎11-01-2008

yes..do a write standby and it will be copied and saved on the other standby unit

Do rate if it helps !