Restrict SMTP Traffic

[rmwhite59]

I am trying to restrict smtp traffic to be only allowed from my exchange server: 192.168.240.10

These are the access-list I used:

access-list 101 extended permit tcp host 192.168.240.10 interface outside eq smtp

access-list 101 extended deny tcp 192.168.240.0 255.255.255.0 any eq smtp

access-list 101 extended permit ip any any

It is not restricting clients from outbound smtp

[acomiskey]

How is the acl applied? If it's not I would recommend the following.

access-list 101 extended permit tcp host 192.168.240.10 any eq smtp

access-list 101 extended deny tcp 192.168.240.0 255.255.255.0 any eq smtp

access-list 101 extended permit ip any any

access-group 101 in interface inside

[rmwhite59]

That worked, thanks a million

[acomiskey · Accepted solution]

Glad it worked out, please rate helpful posts in the future.