Pix 506e smtp

[admin_2]

With the 506e version 5.2(6) is it possible to set it up to only allow outbount smtp traffic from only one IP address?

[mostiguy]

On any pix it is possible

access-list outbound permit tcp host 1.2.3.4 any eq 25

access-list outbound deny tcp any any eq 25

access-list outbound permit ip any any

access-group outbound in interface inside

if 1.2.3.4 makes at outbound smtp connection, it matches the first rule, and is permitted

if 1.2.3.5 does the same, it gets blocked by the second rule, because any tcp connection destined for port 25 matches it.

any other packets is permitted by the third ruke