General SMTP ACL question

[Pete]

Hi,

I have the below currently configured -

permit tcp any myip eq smtp

There is no mail forwarding from the ISP, my question is how can I tighten this up? Is there something else I should be doing??

Thanks

[jackko]

just wondering if static or port forwarding has been configured.

e.g.

static (inside,outside) tcp interface 25 25 netmask 255.255.255.255; and

access-list inbound permit tcp any interface outside eq 25

access-group inbound in interface outside;

or

static (inside,outside) netmask 255.255.255.255;

access-list inbound permit tcp any host eq 25

access-group inbound in interface outside

further, do "sh access-l" to verify whether the acl has been hit or not.

[Pete]

ip nat inside source static tcp 192.168.69.1 25 myip 25

So the first and I have 93030 matches against it.

Thanks