Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

configuring ASA for PortForward SMTP to DMZ

Hi,

I'm new to ASA.

Need some help to config the ASA Firewall. I'll be installing an antispam in the DMZ and a new Mail Server in the Tusted. As such, need to forward port 25 from the External IP to the DMZ's AntiSpam IP plus to allow port 25 from DMZ to Internal.

Please advise on how I can do this.

Thanks & regards,

3 REPLIES
Cisco Employee

Re: configuring ASA for PortForward SMTP to DMZ

for inbound traffic from outside to dmz

static (dmz,outside) tcp 25 25

access-l outside_acl permit tcp any host 25

access-g outside_acl in interface outside

For communication between dmz and inside

static (inside,dmz)

private ip-->ip address of internal exchange server

access_list dmz_acl permit tcp any host eq 25

Community Member

Re: configuring ASA for PortForward SMTP to DMZ

Thanks for the reply. Will try this.

By the way, we have a Active-Passive ASA cluster. By changing the above on the Active unit, will the change be automatically added to the Passive unit ?

regards,

Cisco Employee

Re: configuring ASA for PortForward SMTP to DMZ

yes..do a write standby and it will be copied and saved on the other standby unit

Do rate if it helps !

216
Views
0
Helpful
3
Replies
CreatePlease to create content