<div>
The ACL entry you need will be as follows:<br />
<br />
access-list outside_access_in extended permit tcp any host 74.53.229.82 eq smtp<br />
<br />
you also need a static map entry, either ip&lt;-&gt;ip or port&lt;-&gt;port<br />
(x.x.x.x being the internal IP)<br />
<br />
Use the following is using a static IP translation:<br />
<br />
static (inside,outside) 74.53.229.82 x.x.x.x netmask 255.255.255.255<br />
<br />
or this is a static port based translation<br />
<br />
static (inside,outside) tcp 74.53.229.82 smtp x.x.x.x smtp netmask 255.255.255.255<br />
<br />
or this if using the outside interface's assigned IP and static port translation<br />
<br />
static (inside,outside) tcp interface smtp x.x.x.x smtp netmask 255.255.255.255
</div>


<div>
I guess this really doesn't make sense to me...<br />
<br />
Why would edit the &quot;outside access in&quot; when I want to block outbound SMTP access?
</div>


<div>
<div class="content wysiwyg-content">
Greetings,<br />
<br />
I am looking at configuring a client's site to where they can only send SMTP port 25 to their hosted mail server. &nbsp;I don't want them send SMTP e-mail to any other server. &nbsp;Their mail server IP is 74.53.229.82. &nbsp;What would their access-list need to look like? &nbsp;<br />
<br />
This is what it currently looks like:<br />
<br />
access-list Palmer_Private standard permit 10.0.0.0 255.0.0.0<br />
access-list Palmer_Private standard permit 192.168.0.0 255.255.0.0<br />
access-list Palmer_Private standard permit 172.16.0.0 255.255.0.0<br />
access-list outside_access_in extended permit icmp any any unreachable<br />
access-list outside_access_in extended permit icmp any any time-exceeded<br />
access-list outside_access_in extended permit tcp any host 71.42.96.58 eq pptp<br />
access-list outside_access_in extended permit icmp any any echo-reply<br />
access-list inside_nat0_outbound extended permit ip 10.0.0.0 255.255.255.0 10.0.0.0 255.255.255.0<br />
access-list outside_cryptomap_20 extended permit ip 10.0.0.0 255.255.255.0 10.0.10.0 255.255.255.0 
</div>
</div>


Greetings,

I am looking at configuring a client's site to where they can only send SMTP port 25 to their hosted mail server.  I don't want them send SMTP e-mail to any other server.  Their mail server IP is 74.53.229.82.  What would their access-list need to look like?  

This is what it currently looks like:

access-list Palmer_Private standard permit 10.0.0.0 255.0.0.0
access-list Palmer_Private standard permit 192.168.0.0 255.255.0.0
access-list Palmer_Private standard permit 172.16.0.0 255.255.0.0
access-list outside_access_in extended permit icmp any any unreachable
access-list outside_access_in extended permit icmp any any time-exceeded
access-list outside_access_in extended permit tcp any host 71.42.96.58 eq pptp
access-list outside_access_in extended permit icmp any any echo-reply
access-list inside_nat0_outbound extended permit ip 10.0.0.0 255.255.255.0 10.0.0.0 255.255.255.0
access-list outside_cryptomap_20 extended permit ip 10.0.0.0 255.255.255.0 10.0.10.0 255.255.255.0 

Cisco PIX 501 access-list configuration

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).