Re: [EXIM] CISCO 2501 access control list - Help!

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Roger Books
Datum:  
To: exim-users
Betreff: Re: [EXIM] CISCO 2501 access control list - Help!
> I need to create an access list on a cisco 2501 to allow SMTP connection
>
> to one host (111.111.111.1) and block it from another (111.111.111.2).
> Please help ... need to block spammers. I have installed exim 2.04
> to prevent relaying on 111.111.111.1. Do I need to specify a default
> option to handle cases that are not matched by the following - I will
> allow all other traffic for now.
>
> I tried the following:
>
> access-list 101 deny tcp 0.0.0.0 255.255.255.255 111.111.111.2 0.0.0.0
> eq 25
> access-list 101 permit tcp 0.0.0.0 255.255.255.255 111.111.111.1 0.0.0.0
>
> eq 25
> access-list 101 permit ip 0.0.0.0 255.255.255.255 111.111.111.0
> 0.0.0.255
>


access-list 101 deny tcp host 111.111.111.2 any eq smtp
access-list 101 permit tcp host 111.111.111.1 any eq smtp


--
*** Exim information can be found at http://www.exim.org/ ***