Restrict port IP addresses

Posted on 2009-02-09
Last Modified: 2013-11-16
Im getting ready to configure a CISCO ASA 5510 for our network.  Im fairly new to configuring firewalls and new to CISCO in general.  We host our own exchange server and we have our incoming email filtered for spam and viruses by an outside company.  Would it be possible to restrict forwarding on port 25 to only those IP addresses used by our email filtering services?  

Currently our exchange server is rejecting about 300k emails per day from computers trying to relay emails using only our IP address as the target.  Id like to see as many of those as possible rejected before they ever reach our server.  
Question by:KMDComp
    1 Comment
    LVL 33

    Accepted Solution

    You would create an Access-list and apply it to the outside interface.  

    You would need something similar to:

    You code would need to include something close to the following:

    Static(inside,outside) <Outside IP> <Internal ip> netmask
    Access-list Outside_access_in permit tcp host <ip address or mail host>  host <the outside static of your email server>  eq 25
    access-group Outside_access_in in interface outside  


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    I recently had to create a utility which aim is to update McAfee's Virusscan and that had to be launched from a command line. I thought I’d share my experience with you. Why is it useful to be able to update an Antivirus from the command line?…
    By the time you finish reading this article, you may have already lost all your money because you don't know the simple steps to securing your BitCoin wallet. BitCoin is an incredible invention. It is a decentralized currency system, which is the…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now