Need to open up ports 25 and 443 on 5510 for new email server

mrbarker2312 · ‎08-17-2010

I am new to networking and have just been given the task to migrate our old email server to Exchange 2010. Part of the process requires opening ports 25 and 443 for an the ip of the new machine.. Can anyone help with what I am hoping to be an easy way of doing that in the ASA5510?

Thanks!

praprama · ‎08-17-2010

Hi,

For a configuration example for opening up SMTP (TCP port 25) on your ASA, please refer to the document below:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806745b8.shtml

Only thing is in our case, we will need to open port 43 as well in the access-list for internet users to be able to access. We will just need add another line to the ACL "outside_int" and replace "smtp" with "443". Then we should be good to go.

Please note that in the guide, it also gives an access-list on the DMZ interface which is not required unless you want to restrict traffic from DMZ flowing outside. Hope this helps.

All the best!

Regards,

Prapanch