|
Posted by Walter Roberson on June 19, 2008, 9:21 am
If you were Registered and logged in, you could reply and use other advanced thread options
>I am publishing smtp server on internet ... "access-list inbound permit tcp
>any interface outside eq smtp". I have a group of ip ranges that I would
>like to deny access to port 25. How would I do that?
Before that line, do (e.g.)
access-list inbound deny tcp 61.0.0.0 255.0.0.0 interface outside eq smtp
to block all of 61.*.*.*
Chances are, though, that you have no resources that those hosts
-should- be allowed to access, in which case you could simplify to
access-list inbound deny ip 61.0.0.0 255.0.0.0 any
|