Cisco Pix 515E blocking port 25

[datadan]

I'm a novice with this piece of hardware.
I can login and do some changes.

I want to block incoming and outgoing port 25 traffic how can I do this?

assume 10.10.10.0 subnet.

Thanks

 

[vdalehubbard]

Well, with a PIX 515E firewall, everything is blocked unless you tell it to allow it. If stuff is coming in and out through port 25 which is email (SMTP), then there is an access-list or something allowing SMTP or port 25. Look for that in the PDM or command line and see.

 

[themut]

The PIX by default blocks all incoming traffic but allows all outgoing traffic. If you need to block incoming and outgoing SMTP traffic, then you need to configure an ACL. If you have an access list already configured and applied to the outside interface, make sure it is not permitting SMTP traffic, this ACL controls incoming traffic. For outgoing traffic you need to configure an ACL and apply it to the inside interface, that is is one is already configured. The link below is an excellent guideline for your task:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml

 

[LloydSev]

the corresponding line would be..

access-list BlockSMTP deny tcp any any eq smtp
access-group BlockSMTP in interface inside
access-group BlockSMTP in interface outside

Because by default, the PIX permits all outgoing traffic, but no incoming traffic.

Also, there is a forum specifically for the PIX device.

http://www.tek-tips.com/threadminder.cfm?pid=35

Computer/Network Technician
CCNA