<div>
<div class="content wysiwyg-content">
I have a network that is blacklisted. I need to stop all traffic on port 25 from leaving the ASA except from one IP address (my security mail appliance). &nbsp;<br />
I'm learning (but still weak) on ASA CLI. <br />
Here's code I've found on the web: <br />
<br />
access-list inbound_on_inside permit tcp any host 1.1.1.1 eq smtp<br />
access-list inbound_on_inside deny tcp any any eq smtp<br />
access-list inbound_on_inside permit ip any any<br />
access-group inbound_on_inside in interface inside<br />
<br />
I'm assuming the 1.1.1.1 will be my appliance IP and that this is ALL I need to do to stop SMTP traffic from any machine/device inside the lan from leaving the ASA except the IP I have inserted in the 1.1.1.1 location. &nbsp;If not, please advise. <br />
<br />
Also, I would like to monitor any SMTP traffic hitting the ASA, now being blocked, to find the rogue station(s). &nbsp;All my anti-virus scans are showing the machines to be healthy and clean. &nbsp;<br />
<br />
Thank you for any thoughts/help/constructive<wbr /> statements<br />
<br />
daver
</div>
</div>


I have a network that is blacklisted. I need to stop all traffic on port 25 from leaving the ASA except from one IP address (my security mail appliance).  
I'm learning (but still weak) on ASA CLI. 
Here's code I've found on the web: 

access-list inbound_on_inside permit tcp any host 1.1.1.1 eq smtp
access-list inbound_on_inside deny tcp any any eq smtp
access-list inbound_on_inside permit ip any any
access-group inbound_on_inside in interface inside

I'm assuming the 1.1.1.1 will be my appliance IP and that this is ALL I need to do to stop SMTP traffic from any machine/device inside the lan from leaving the ASA except the IP I have inserted in the 1.1.1.1 location.  If not, please advise. 

Also, I would like to monitor any SMTP traffic hitting the ASA, now being blocked, to find the rogue station(s).  All my anti-virus scans are showing the machines to be healthy and clean.  

Thank you for any thoughts/help/constructive statements

daver

prevent all outbound port 25 traffic on all but one IP

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).