cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
329
Views
0
Helpful
1
Replies

Need help with port forwarding

Kopoly
Level 1
Level 1

Hi,

I'm trying to open smtp on my ASA-5505.  My software version is ASA 9.2(4) and ASDM 7.5(2).  Here is what I did:

I created this access rule:

access-list outside_access_in line 1 extended permit tcp any object obj-192.168.1.20 eq smtp
access-group outside_access_in in interface outside

And did the following NAT

nat (inside,inside) 1 source static obj-192.168.1.20 interface service any SMTP-Service-Object, where SMTP-Service-Object is smtp.

When I send the following packet tracer:   packet-tracer input outside tcp 127.217.5.115 25 192.168.1.20 25 xml

The packet is dropped right after ROUTE-LOOKUP with error "Slowpath security check failed."

What am I doing wrong?

Thanks in advance,

1 Reply 1

Kanwaljeet Singh
Cisco Employee
Cisco Employee

Hi Nader,

Why is your nat rule (inside, inside). Shouldn't it be nat (inside,outside)?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Review Cisco Networking for a $25 gift card