Question : Lock down SMTP on Cisco ASA Or Exchange 2007 for MXlogic (Spam Filtering)

I need to lockdown my Exchange 2007 or Cisco ASA firewall for MXlogic IP range.

Only should allow SMTP from this IP range

Preferred Setting

If your firewall solution accepts Classless Inter-Domain Routing (CIDR) and can support Class 8 C notation please include the following:

 

CIDR
 Starting IP
 Ending IP
 
208.65.144.0/21
 208.65.144.0
 208.65.151.255
 
208.81.64.0/22
 208.81.64.0
 208.81.67.255
 

Can I please have instructions for how to do on the receive connector in Exchange 2007 and OR for Cisco ASA in ASDM

Thanks

Answer : Lock down SMTP on Cisco ASA Or Exchange 2007 for MXlogic (Spam Filtering)

you can create an object group with those allowed ip/networks then create an access-list rule that allows SMTP only from this object group

you do not need to do this on your Exchange 07 server because as long as your ASA is doing its job, it'll never see SMTP traffic from any other ip/networks besides the ones in this object group

http://www9.cisco.com/en/US/docs/security/asa/asa72/asdm52/user/guide/aclrules.html