topic Re: SMTP Port 25 in Network Security https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032067#M916157 <HTML><HEAD></HEAD><BODY><P>ok, got it.</P><P></P><P>i see a "no fixup protocal smtp 25" entry.</P><P></P><P>For the entries above, does the "no" need to be removed? how do i remove that?</P></BODY></HTML> Wed, 23 Jul 2008 16:53:10 GMT jasonjonkman 2008-07-23T16:53:10Z SMTP Port 25 https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032065#M916152 <P>I recently signed up with MXLogic to filter SPAM.</P><P>They advised mt yo lock down my PIX 501 firewall to only accept incoming SMTP connections on port 25 to only IP ranges</P><P>208.65.144.0/21</P><P>208.81.64.0/22 </P><P></P><P>How do I do this?</P><P>What entries do i need to add to my PIX?</P><P></P><P>Thanks in advance! </P> Mon, 11 Mar 2019 13:18:57 GMT https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032065#M916152 jasonjonkman 2019-03-11T13:18:57Z Re: SMTP Port 25 https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032066#M916155 <HTML><HEAD></HEAD><BODY><P>If you have an existing access list applied to your outside interface. Just add the following entries.</P><P></P><P>access-list <NAME> permit tcp 208.65.144.0 255.255.248.0 <IP.OF.YOUR.MAIL.SERVER> 255.255.255.255 eq smtp</IP.OF.YOUR.MAIL.SERVER></NAME></P><P>access-list <NAME> permit tcp 208.81.64.0 255.255.248.0 <IP.OF.YOUR.MAIL.SERVER> 255.255.252.0 eq smtp</IP.OF.YOUR.MAIL.SERVER></NAME></P><P></P><P>If not, just add those entries plus...</P><P></P><P>access-group <NAME> in interface outside</NAME></P></BODY></HTML> Wed, 23 Jul 2008 15:25:59 GMT https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032066#M916155 acomiskey 2008-07-23T15:25:59Z Re: SMTP Port 25 https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032067#M916157 <HTML><HEAD></HEAD><BODY><P>ok, got it.</P><P></P><P>i see a "no fixup protocal smtp 25" entry.</P><P></P><P>For the entries above, does the "no" need to be removed? how do i remove that?</P></BODY></HTML> Wed, 23 Jul 2008 16:53:10 GMT https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032067#M916157 jasonjonkman 2008-07-23T16:53:10Z Re: SMTP Port 25 https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032068#M916159 <HTML><HEAD></HEAD><BODY><P>If you want to enable fixup smtp 25, you would simply do "fixup smtp 25". That will get rid of the "no".</P></BODY></HTML> Wed, 23 Jul 2008 16:56:54 GMT https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032068#M916159 acomiskey 2008-07-23T16:56:54Z Re: SMTP Port 25 https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032069#M916160 <HTML><HEAD></HEAD><BODY><P>if i remove the "no" does that enable/force smtp port 25 traffic to go through the entries for MXLogic i entered?</P><P></P><P>does the "no" entry disable the entries i entered?</P></BODY></HTML> Wed, 23 Jul 2008 16:58:52 GMT https://community.cisco.com/t5/network-security/smtp-port-25/m-p/1032069#M916160 jasonjonkman 2008-07-23T16:58:52Z