[greenmind]

Hi,
I am new to this forum. I was recently started a new job and they have an ASA 5510. I have never used this device before. We are upgrading our spam filter software and it will require us to create a an allow rule to allow outbound traffic to *.mail-filters.com on port 25080. How would I go about doing this?

I have found information on allowing certain IP addresses but cannot find out how to do this by port number. I do not want to wreck the infrastructure here considering I am the new guy.

P.S. The person who set this entire network up no longer works here and left no documentation.

I appreciate any help you can give me.

Thank you.

[AndyJG247]

Hmm, never used the ASDM but may be able to do this from command line if you fancy a shot?

[greenmind]

Sure I can give it a shot from the command line.

[AndyJG247]

Can you try telnetting to the box first to see if we have access?
If that doesn't work download PuTTY (LINK)
and try connecting to 22 (SSH).
You should be prompted for a login.

[greenmind]

I can telnet into it.

[AndyJG247]

Splendid, I'm concious I don't want to be too basic but you can use

 
enable
show run

to show the current config.

As this is Inside going Outside then we need to see what access-lists you have setup to stop traffic outbound.
Can you see anything starting access-list?
If you want you can post them here or PM me. If posting thenchange any external IP addresses just to make sure.

[greenmind]

I will pm you Andy

[AndyJG247]

Sorry, there is a bit more too!
Press space or enter to get more onscreen.

[greenmind]

I will pm you

[AndyJG247]

Hi,
I've had a look through the config and, assuming I didn't miss something whilst pasting them all together (), then there appears to be no access-lists bound to the internal interface. The PIX/ASA allow all traffic from high security to low security assuming there is a way to get there. I would imagine based on this that it should already be working. You could try telnet to see if you get a response?

I would suggest at some point that an ACL is setup to block at least port 25 traffic outbound though.