configuring ASA for PortForward SMTP to DMZ

[tmssupport]

Hi,

I'm new to ASA.

Need some help to config the ASA Firewall. I'll be installing an antispam in the DMZ and a new Mail Server in the Tusted. As such, need to forward port 25 from the External IP to the DMZ's AntiSpam IP plus to allow port 25 from DMZ to Internal.

Please advise on how I can do this.

Thanks & regards,

[abinjola]

for inbound traffic from outside to dmz

static (dmz,outside) tcp 25 25

access-l outside_acl permit tcp any host 25

access-g outside_acl in interface outside

For communication between dmz and inside

static (inside,dmz)

private ip-->ip address of internal exchange server

access_list dmz_acl permit tcp any host eq 25

[tmssupport]

Thanks for the reply. Will try this.

By the way, we have a Active-Passive ASA cluster. By changing the above on the Active unit, will the change be automatically added to the Passive unit ?

regards,

[abinjola]

yes..do a write standby and it will be copied and saved on the other standby unit

Do rate if it helps !