Deny SMTP to outside IP

[cmal00]

I need to configue my PIX so that I can deny SMTP to a outside IP that is spamming my email server.

 

[Supergrrover]

You can add this line to your outside ACL -

access-list inbound deny tcp SpammerIP ExternalPixIP eq 25

or you can just block that IP totally -

access-list inbound deny ip SpammerIP ExternalPixIP


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[cmal00]

Thanks Brent, do I need to specify a mask on the source?

 

[Supergrrover]

Nope, just the IP of the spammer. If you have a range of external IP's then you want the mask on that part though.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[cmal00]

Brent,

I'm getting a error:

ERROR: Source address,mask <spammerIP,externalIP> doesn't pair
I try putting masks on both but still the same

Thx

 

[Supergrrover]

Sorry left off the host keyword -

access-list inbound deny ip host SpammerIP host ExternalPixIP
or
access-list inbound deny ip SpammerIP 255.255.255.255 ExternalPixIP 255.255.255.255 (or whatever network mask you have)


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[cmal00]

Thanks Brent, that worked