topic two questions w/ PIX in Network Security https://community.cisco.com/t5/network-security/two-questions-w-pix/m-p/310004#M593704 <P>A client has their primary DNS on the inside and a secondary DNS on the outside (not a DMZ port). They want to be able to have the secondary DNS poll the primary every fifteen and intiate a zone transfer if required. What is an easy way to do this? The pix is running 6.3.</P><P></P><P>Second question. Same client wants me to restrict outbound smtp to a certain address (a mail relay located on the outside). Can this be done? That is, only allow outbound smtp to a specific ip...if the mail is destined for any other ip, drop it. They do not want any inbound smtp. Can this even be done on the PIX?</P><P></P><P>Thanks</P> Fri, 21 Feb 2020 07:18:49 GMT admin_2 2020-02-21T07:18:49Z two questions w/ PIX https://community.cisco.com/t5/network-security/two-questions-w-pix/m-p/310004#M593704 <P>A client has their primary DNS on the inside and a secondary DNS on the outside (not a DMZ port). They want to be able to have the secondary DNS poll the primary every fifteen and intiate a zone transfer if required. What is an easy way to do this? The pix is running 6.3.</P><P></P><P>Second question. Same client wants me to restrict outbound smtp to a certain address (a mail relay located on the outside). Can this be done? That is, only allow outbound smtp to a specific ip...if the mail is destined for any other ip, drop it. They do not want any inbound smtp. Can this even be done on the PIX?</P><P></P><P>Thanks</P> Fri, 21 Feb 2020 07:18:49 GMT https://community.cisco.com/t5/network-security/two-questions-w-pix/m-p/310004#M593704 admin_2 2020-02-21T07:18:49Z Re: two questions w/ PIX https://community.cisco.com/t5/network-security/two-questions-w-pix/m-p/310005#M593707 <HTML><HEAD></HEAD><BODY><P>I think I solved my second question. Can someone verify this ACL:</P><P></P><P>permit tcp a.b.c.d 0.0.0.0 eq 25 w.x.y.z 0.0.0.0 eq 25</P><P></P><P>a.b.c.d is the inside network and the other the outside. I think that applied in on the inside interface will do it. </P><P></P><P></P></BODY></HTML> Fri, 26 Mar 2004 19:12:04 GMT https://community.cisco.com/t5/network-security/two-questions-w-pix/m-p/310005#M593707 2004-03-26T19:12:04Z