need help with an access list

[gda2]

I am trying to block smtp traffic getting to the internet except for my mail server which is at 192.168.1.220. I have an access list setup but I am not sure that I have it applied to the correct interface. Currently I have it attached to e0 and i think that I need to attach it to s0.1 and s0.2, but with NAT involved I'm not sure that it is going to work. Any help would be appreciated. My configuration is attached. Thanks,

[pjo]

Hi !

This seems rigth to me, I think the access-list are checked before NAT are applied ?

Have you applied and done some debugging, maybe you should add a log statement to the access-list ?

Regards

[spremkumar]

hi

In u r ACL 100 u havent defined any permit statement all deny statements are there and i think ur aware tht u hve a implicit deny at the end of all ACL by default so all ur traffic will b denied.just alter u r ACL by adding permit any in the last of ACL 100 so that it wont block out all ur traffic ..will block the denied traffic..

regds