4

I have a Cisco PIX-515, version 6.3(4). I need to add a rule allowing the delivery of email from a series of IP addresses (e.g. XX.XXX.XXX.0/20). Is there a way to put such a rule into the PIX without individually entering each IP address?

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 7 '17 at 17:57
  • I think the correct answer to this question is to buy an ASA. :) – user3629081 Jul 11 '18 at 18:07
  • Just how would the asa be different then a PIX with regards to this question ? – Matt Douhan Nov 5 '18 at 18:19
1

Try this:

object-group network My-LAN
 network-object 10.10.10.0 255.255.255.0
!
access-list My-ACL extended permit tcp any object-group My-LAN eq smtp
!
access-group My-ACL in interface My-Interfacename
!

you dont need to add this, i just want to share how to add the "interfacename":

interface Ethernet0.90
 vlan 90
 nameif My-Interfacename
 security-level 60
 ip address 10.10.10.1 255.255.255.0
!
|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.