Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

on a pix how do I make port traffic, port 25 for email in this case, usable by a specific ip address in my spread of IPs?

I want to send email to someemail@192.168.0.1 and have the pix send it to port 25 on that IP if it is email and discard it if it is anything else.

Thank you.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

what PIX version?

The feature you want to use is Port Redirection. The basic syntax should be:

static (INTERFACE1,INTERFACE2) PROTOCOL IPADDRESS2 PORT2 IPADDRESS1 PORT1 netmask NETMASK

so for example:

static (INTERFACE1,INTERFACE2) tcp yourexternalip smtp 192.168.0.1 smtp netmask 255.255.255.255

And on your ACL you will need something like this:

access-list outside-inbound permit tcp any host yourexternalip eq smtp

(Disclaimer: I haven't touched Cisco for a while, but I'm 100% someone who has will be along shortly to confirm or correct!)

share|improve this answer
    
Yep the only comment is you are going to want and extended ACL - so access-list <outside_access_list> extended permit tcp any host <internal_ip> eq smtp –  Zypher Feb 3 '10 at 8:20
    
what do I put on <outside_access_list> my external ip? –  johnny Feb 3 '10 at 20:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.