Hello,
Are these config ok, as per need.
But till not working except SMTP
Requirement
* allow SMTP traffic from outside to host 80.1.2.3
* allow port 5512 from inside to outside for host 192.168.20.50
* allow inside host 192.168.1.10 to communiate on port 443 to dmz host 172.10.10.5
%%%%config%%%%
interface GigabitEthernet0/0
description "Connected to Internet"
speed 100
duplex full
nameif Outside
security-level 0
ip address 80.1.2.1 255.255.255.240
!
interface GigabitEthernet0/1
description "Connected to LAN"
speed 1000
duplex full
nameif inside
security-level 100
ip address 192.168.20.1 255.255.255.0
!
!
interface GigabitEthernet0/3
description "Connected to DMZ-SW"
speed 100
duplex full
nameif DMZ
security-level 50
ip address 172.10.10.1 255.255.255.0
access-list OUTSIDE extended permit tcp any host 80.1.2.3 eq smtp
access-list INSIDE extended permit tcp host 192.168.20.50 any eq 5512
access-list INSIDE extended permit tcp host 192.168.20.100 any eq SMTP
access-list DMZ extended permit tcp host 172.10.10.5 eq 443 host 192.168.1.10 eq 443
global (Outside) 1 interface
nat (inside) 1 192.168.20.50 255.255.255.255
static (inside,DMZ) 172.10.10.5 192.168.1.10 netmask 255.255.255.255
static (inside,Outside) 80.1.2.3 192.168.20.100 netmask 255.255.255.255
access-group OUTSIDE in interface Outside
access-group INSIDE in interface inside
access-group DMZ in interface DMZ
route Outside 0.0.0.0 0.0.0.0 80.1.2.2
