Cisco ASA 5510 Objeck IP Bloked when I use inside ip address

[KY_]

Hello,

I have a ASA 5510 and I want to provide a rule for exchange ,
All user want to access to internet
I want to create a rule while I provide a object and  in object ip address bloked by asa,

Because users use its ip address at same time.

can you help me please. whan I can I do,

[Jennifer Halim]

For mail, you need to remove the following static NAT statement as it is incorrect:

static (outside,inside) mailsrv mail netmask 255.255.255.255

After removing the above, please "clear xlate".

Can you please advise what is actually not working? Inbound mail not working? Outbound mail not working?

[KY_]

Hi Jennifer,

when ı remove the  this line what will I do?

static (outside,inside) mailsrv mail netmask 255.255.255.255

can you provide correct config line for me  please.?

Thank You,

[Jennifer Halim]

You already have the correct static NAT statement configured:

static (inside,outside) mail mailsrv netmask 255.255.255.255

So there is no other line that needs to be configured except removing the static NAT advised earlier.

[KY_]

Thanks,

Excuse me, I could not understand

I must remove this line, Are you  sure ?

static (outside,inside) mailsrv mail netmask 255.255.255.255

is this line enough  NAT rule for e-mail traffic  outside and inside ?

[Jennifer Halim]

Yes, this line: static (inside,outside) mail mailsrv netmask 255.255.255.255

is enough because that line works bidirectionally, ie: both for outbound and inbound.