• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 349
  • Last Modified:

Cisco 877 Router open ports

Hi
I have recently installed a Cisco 877 router.

We now need to open a port for workstations on the lan to access AOL (port 5190) What is the best way to do this.

Also we are sending e-mail out from our exchange server to an smtp mail server on the web what is the best way to configure the router for this?

Thanks for your assistance.

0
Potts2002
Asked:
Potts2002
  • 2
2 Solutions
 
WalterHCommented:
Is the 877 performing NAT for you? Do you have dynamic VPN trafic?
0
 
WalterHCommented:
Lets assume NAT and no dynamic VPN

! where insideAdder is the actual ip address of your AOL server, like 192.168.17.4 and
! OutsideAdder is your fixed IP address from your ISP - If it not fixed, this is more complex but doable
ip nat inside source static tcp insideAdder OutsideAdder 5190

! Change FastEtnernet4 to the actual outside interface, the one that has the ip nat outside
interface FastEthernet4
 description $FW_OUTSIDE$$ES_WAN$
 ip nat outside
! You may already have an access group for packets inbound, if so, then you will use that group
 ip access-group 112 in

! Note 112 matches the 112 in the access-group above and OutsideAddr is your external IP address again
access-list 112 permit tcp any host OutsideAddr eq 5190

0
 
ddiazpCommented:
I'm not sure if that's correct; that will block any other traffic including returning HTTP traffic for instance as the 877 doesn't have a stateful firewall embedded.

When you say to allow workstations to allow AOL on port 5190, are connections coming into your network or outside your network?


The best practice for outgoing email is to block ANY outgoing smtp traffic except for your exhcange server

ip access-list in->out
20 permit tcp host <exchange ip> any eq 25 log
30 deny tcp any any eq 25 log
40 permit ip any any

int f4
ip access-group in->out out
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now