topic Re: Blocking HTTP, Allowing POP3 in Network Security

Blocking HTTP, Allowing POP3

tstay-205 — Mon, 11 Mar 2019 11:08:00 GMT

We have a Cisco Pix 515E firewall. We would like to restrict a workstation from serving the Internet (HTTP) but allowing it to use the POP3. Can someone guide us on how to do it?

Re: Blocking HTTP, Allowing POP3

rajbhatt — Fri, 07 Sep 2007 08:59:32 GMT

Hi,

Ur requirement is not clear .

Is it that u want that machine to access only outbound pop3 and restrict outbound hhtp

If that isthe case :

u can try these :

nat (inside) 1 x.x.x.x 255.255.255.255

global(outside) 1 interaface

access-list abc deny host x.x.x.x any eq http(to check the hit counts)

access-list abc permit host x.x.x.x any eq pop3

access-gr abc in interface inside

Raj

Re: Blocking HTTP, Allowing POP3

tstay-205 — Mon, 10 Sep 2007 00:18:23 GMT

I want to restrict the machine from surfing the Internet, but allow them to receive email through POP3...

So do I just need to replace the x.x.x.x with the IP address?

And where do I enter these codes?

Thank you.