I need to open a port in my asa5510 for smtp port 25

[jojochvzasa5510]

I have an asa5510 where only my email server can send emails smtp port 25 to outside.  I need my webserver inside the firewall to be able to send emails to outside also.. how can I open port 25 just for that server.. any help will be appreciated..

[Nagaraja Thanthry]

Hello,

In your inside interface access-list, add the line that enables the

WebServer to send email outside.

Access-list any eq 25

This will override the default deny policy and allow you to send emails from

the WebServer.

Example:

If the webserver ip address is 192.168.1.100, then,

Access-list inside_access_out line 1 permit tcp host 192.168.1.100 any eq 25

Hope this helps.

Regards,

NT