topic I applied same access-list in Network Security

Outside access

Rizwan — Tue, 12 Mar 2019 04:59:04 GMT

I am using ASA 5515-X version 9.1

I have created access-list to allow email servers ports from outside. The email server is having static NAT on firewall. But the access-list to ping and to allow tcp ports is not working properly. its working with any any only.

access-list outside_access_in line 2 extended permit icmp any host 203.1.1.1

access-list outside_access_in line 3 extended permit tcp any host 203.1.1.1 eq smtp

Hi,I think you are missing

Vibhor Amrodia — Sat, 25 Oct 2014 07:30:44 GMT

Hi,

I think you are missing some ports for the Email server communication.

You would be able to apply the capture on the ASA device and see the ports on which the communication works.

Then , just allow those ports.

Thanks and Regards,

Vibhor Amrodia

No, it was some other issue.

Rizwan — Sat, 25 Oct 2014 07:48:39 GMT

No, it was some other issue. I have sorted out, thanks anyways.

Please indicate what the

Marius Gunnerud — Sat, 25 Oct 2014 19:27:24 GMT

Please indicate what the solution was so others can benefit from the solution.

Hi rizwansiddiqi, Did you use

Aref Alsouqi — Sat, 25 Oct 2014 21:50:05 GMT

Hi rizwansiddiqi,

Did you use the private (non-mapped) ip address of the email server in the access lists?

Regards,

Aref

I applied same access-list

Rizwan — Mon, 27 Oct 2014 06:15:17 GMT

I applied same access-list with private ip addresses (non-mapped) and it worked.

yep, true.

Rizwan — Mon, 27 Oct 2014 06:16:25 GMT

yep, true.