Blocking port 25 on a single port in switch

[Prasad6533]

We have below switch

SW2#show version
Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 12.2(55)SE11, RELEASE SOFTWARE (fc3)

Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Wed 17-Aug-16 12:46 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x02800000

ROM: Bootstrap program is C3560E boot loader
BOOTLDR: C3560E Boot Loader (C3560E-HBOOT-M) Version 12.2(44r)SE3, RELEASE SOFTWARE (fc3)

Is there any ways we can block port 25 on a single port ?

Say we have one server on below interface  on port  GigabitEthernet0/11

interface GigabitEthernet0/11

I can block port 25 on this interface so no emails can go out from this particular server ?

[luis_cordova]

Hi @Prasad6533 ,

This could be achieved with an ACL, which blocks traffic to the server through port 25 and allows all other types of traffic.

This link explains very well the subject of the ACL on your device:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/swacl.html

Regards

[balaji.bandi]

You can do as below ACL :

access-list 10 deny tcp any any eq smtp

access-list 10 permit ip any any

interface GigabitEthernet0/11

ip access-group 10 in

Test and advice.