From: RG on
I am publishing smtp server on internet ... "access-list inbound permit tcp
any interface outside eq smtp". I have a group of ip ranges that I would
like to deny access to port 25. How would I do that?

Thanks in advance

From: Walter Roberson on
In article <4859dffe$0$5010$607ed4bc(a)cv.net>, RG <nobody(a)nowhere.com> wrote:
>I am publishing smtp server on internet ... "access-list inbound permit tcp
>any interface outside eq smtp". I have a group of ip ranges that I would
>like to deny access to port 25. How would I do that?

Before that line, do (e.g.)

access-list inbound deny tcp 61.0.0.0 255.0.0.0 interface outside eq smtp

to block all of 61.*.*.*


Chances are, though, that you have no resources that those hosts
-should- be allowed to access, in which case you could simplify to

access-list inbound deny ip 61.0.0.0 255.0.0.0 any