Networks

Ask something
Discussion Locked

Cisco Pix Config

0 helpful
5 replies

by rcoolman

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a PIX (IOS v 6.1) with a mail server inside. I am looking for a way to block all outgoing SMTP traffic that doesn't come from my mailserver. For example, if one our systems is used to send Spam (not through the server), it won't result in our IP being blacklisted, because it the Pix intercepted it. ??

5 replies

by greybeard770

Make a rule that allows traffic with destination port 25 (SMTP) from the mail server to all IP destinations. Follow that rule with one that blocks all traffic with destination port 25 from all internal IP to all external IP. This is also a real good idea to prevent viruses with their own SMTP engine from sending mail.

This discussion is closed to new replies.