Bock Outgoing Ports on Cisco 678

[TrueFX]

Can someone please help with the config on my Cisco 678.

Our domain is currently being blacklisted. My guess is one of our machines is infected with a mailer worm. I need to buy myself some time to find the machine. I think the best way to prevent this is to block all SMTP traffic going out except the Mail Server itself.

I haven't been able to find the command on the net.

Thanks in advance for any information.

[sourabhagarwal]

I feel you can do this by configuring access lists on router.

access-list 101 permit tcp 10.1.1.1 eq 80 any

access-list 101 deny tcp any eq 80 any

access-list 101 permit ip any any

int fa0/0

access-group 101 in

i have assumed IP of mail server is 10.1.1.1 and fa0/0 interface of router is connected to inside LAN. you can replace these with actuals.

hope this URL will give you more information on ACLs.

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

rate if it helps ...