Cisco IOS Based Router Configuration
Hosted Cloud
Replace IP's with Spam Experts delivery IP's which can be found here:
Local Cloud
- Create an object called Spam Experts in configuration mode
- Add the hosts of the delivery servers
- Add a firewall rule on the incoming WAN interface with the object
In the example below, we called it acl_wan_in
fw01# configure terminal
fw01(config)# object-group network SpamExperts# fw01(config-network-group)# host 10.0.0.1 host 10.0.0.2 host 10.0.0.3 -SNIP--
fw01#exit
fw01(config)# ip access-list extended ACL_WAN_IN permit tcp object-group SpamExperts host [INSERT WAN IP ADDRESS HERE AND REMOVE BRACKETS] eq smtp
The above assumes that an ACL is applied on the Public WAN interface named ACL_WAN_IN and that the default rule is set to 'deny ip any any' and that you add the permit before the deny.
To add more IPs after initial config you can do the following:
fw01# configure terminal fw01(config)# object-group network SpamExperts fw01(config-network-group)#
host [IP ADDRESS]
IPs should be replaced with your clusters delivery IPs