Allowing incoming SMTP traffic from only one source...

[sflasteradexs]

Greetings, I am using a PIX and having a spam problem. We are using the spam service Postini. I want to deny all SMTP traffic unless it comes from one of the Postini servers. A simple task?

[jmia]

You can setup host to host for SMTP, i.e.

access-list smtp permit tcp host host eq smtp

access-group smtp in interface outside

static (inside,outside) tcp smtp smtp netmask 255.255.255.255 0 0

Save with: wirite mem and also issue clear xlate

Hope this helps and pls rate post if it does.

Jay

[clsysadmin]

I am in the process configuring (slowly) a new ASA5510 (I'm also new to Cisco gear) and will have a very similar config need except with my spam service, I have a range of IPs that need to have my DMZ inbound smtp server be "locked" on to ...

I presume the entries would be similiar but is there any entry that might different ...

Just trying to prevent myself from making an otherwise avoidable mistake.

Thanks,

Roy