How to open up specific ports?

[jrobs]

Hello,

I'm running an Exchange server inside my network, and I mapped a public IP to the server's private IP like so:

ip nat inside source static 10.0.60.3 68.xxx.xxx.xxx extendable

For security's sake, I'd like to just send data to and from the outside world on necessary ports for Exchange and Terminal Services. I'd also like the server to reply to ping requests.

How do I do it?

Thanks,
Josh

 

[Twinmoon]

I think this is correct...

ip nat inside source tcp source xxx.xxx.xxx.xxx [port #] yyy.yyy.yyy.yyy [port #] extendable

Then put an access list on the outside interface to permit the ports you want permited, and block all else.