How do I configure my Cisco pix 515 to prevent outbound port 25 connections to the Internet except for my mail server?

Posted on 2009-12-17
Last Modified: 2013-11-22
We've been blacklisted by Spamhouse because we have a cutwail2 spamBOT infection.
We run Trend MIcro neatsuite advanced, but haven't been able to identify the infected computer yet.
Question by:jkassil
    LVL 22

    Accepted Solution

    access-list inside_out permit tcp host any eq smtp
    access-list inside_out deny tcp any any eq smtp
    access-list inside_out permit ip any any
    access-group inside_out out interface outside

    Replace with your mail server's IP address and you're good to go.  If you already have an access list assigned to outbound traffic on the outside interface, you'll need to incorporate the above access list into that.

    Expert Comment

    Also once you add the acl as jodylemonie provided an example of you can then do: show logging | grep (106023|106100)
    this will show you deny's from your new acl and help identify the device that is sending email.

    Author Closing Comment

    We are still evaluating the results, but to date this solution apparently has been successful.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
    From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now