ciscoasa# show config
: Saved
: Written by enable_15 at 11:13:59.588 UTC Mon Sep 3 2007
!
ASA Version 7.2(2)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password xxxxxxx encrypted
names
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 172.20.254.250 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 194.221.215.98 255.255.255.240
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
passwd xxxxxxx encrypted
ftp mode passive
dns server-group DefaultDNS
 domain-name default.domain.invalid
object-group service 1433 tcp
 description 1433
 port-object range 1433 1433
object-group service 2000 tcp
 description 2000
 port-object range 2000 2000
object-group service 3000 tcp
 description 3000
 port-object range 3000 3000
object-group service ftp tcp
 description ftp
 port-object eq ftp
object-group service ftp-data tcp
 description ftp-data
 port-object eq ftp-data
object-group service pop tcp
 description pop
 port-object eq pop3
object-group service smtp tcp
 description smtp
 port-object eq smtp
access-list inside_nat0_outbound extended permit ip 172.20.254.0 255.255.255.0 2
17.77.7.0 255.255.255.192
access-list outside_access_in extended permit tcp any host 194.221.215.98 object
-group smtp
access-list outside_access_in extended permit tcp any host 194.221.215.98 object
-group pop
access-list outside_access_in extended permit tcp 217.77.7.0 255.255.255.192 any

access-list outside_access_in extended permit tcp any host 194.221.215.98 object
-group ftp-data
access-list outside_access_in extended permit tcp any host 194.221.215.98 object
-group ftp
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-522.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 172.20.254.0 255.255.255.0
static (inside,outside) tcp interface 3000 172.20.254.1 3000 netmask 255.255.255
.255
static (inside,outside) tcp interface 2000 172.20.254.1 2000 netmask 255.255.255
.255
static (inside,outside) tcp interface ftp-data 172.20.254.99 ftp-data netmask 25
5.255.255.255
static (inside,outside) tcp interface ftp 172.20.254.99 ftp netmask 255.255.255.
255
static (inside,outside) tcp interface pop3 172.20.254.1 pop3 netmask 255.255.255
.255
static (inside,outside) tcp interface smtp 172.20.254.1 smtp netmask 255.255.255
.255
static (inside,outside) tcp interface 1433 172.20.254.111 1433 netmask 255.255.2
55.255
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 194.221.215.97 20
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http 195.188.251.0 255.255.255.0 outside
http 172.20.254.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet 172.20.254.0 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 172.20.254.251-172.20.254.254 inside
!

!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
  inspect pptp
  inspect ctiqbe
  inspect dcerpc
  inspect http
  inspect icmp
  inspect icmp error
  inspect ils
  inspect ipsec-pass-thru
  inspect mgcp
  inspect snmp
policy-map type inspect esmtp test
 description test
 parameters
  no mask-banner
 match sender-address length gt 320
  log
 match MIME filename length gt 255
  log
 match cmd line length gt 512
  log
 match cmd RCPT count gt 100
  log
 match body line length gt 998
  log
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:7e1cbaa3b623e5a661abb12e55be08ee
ciscoasa#