I have a Cisco PIX-515, version 6.3(4). I need to add a rule allowing the delivery of email from a series of IP addresses (e.g. XX.XXX.XXX.0/20). Is there a way to put such a rule into the PIX without individually entering each IP address?

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Aug 7, 2017 at 17:57
  • I think the correct answer to this question is to buy an ASA. :) Jul 11, 2018 at 18:07
  • Just how would the asa be different then a PIX with regards to this question ? Nov 5, 2018 at 18:19

1 Answer 1


Try this:

object-group network My-LAN
access-list My-ACL extended permit tcp any object-group My-LAN eq smtp
access-group My-ACL in interface My-Interfacename

you dont need to add this, i just want to share how to add the "interfacename":

interface Ethernet0.90
 vlan 90
 nameif My-Interfacename
 security-level 60
 ip address

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.