Also for police, do we need the inspect action also? The docs doesn't have
the inspect action.


http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/qos.html#wp1067962

With regards
Kings

On Tue, Jan 19, 2010 at 6:31 PM, Kingsley Charles <
[email protected]> wrote:

> Hi all
>
> The question says that SMTP should be checked for the domain. I have the
> following questions:
>
> 1) Which domain is to be considered, the local domain or sender's domain.
> If it is the local domain, then the following solution is correct:
>
> policy-map type inspect esmtp mail
>  parameters
>   mail-relay king.com action drop-connection
>
> 2)If we need match the domain in sender's address, isn't the following the
> correct solution?
>
>
>  regex king ".*king.com"
>
> policy-map type inspect esmtp mail
>  parameters
>  match sender-address regex king
>   reset
>
>
> *Solution given in the work book*
>
>
> regex king "king.com"
>
> policy-map type inspect esmtp mail
>  parameters
>  match sender-address regex king
>   reset
>
>
>
>
> With regards
> Kings
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to