Ken Ray's questions

Probably a dumb question, but I am very inexperienced with how to configure our ASA 5510 - using the ASDM tool seems easier that the old IOS CLI, however.

What I want to do is block all SMTP traffic from leaving our internal network through the firewall, EXCEPT from a few specified servers (mail server, web servers). Here is what I've done:

1) Created a network group with the internal IP addresses of the servers that should be sending email (WEB_EMAIL)

Now, here is what I think I need to do.

2) Set up an inside access rule as follows: Source: WEB_EMAIL Destination:any Service: tcp: smtp Action: permit

3) Set up an inside access rule just below that last one as follows: Source: any Destination:any Service: tcp: smtp Action: deny

Have I got it correct? Or should the destination in both of those rules be the outside IP address? Are there any nasty side effects that I should be aware of?

Thanks

Here's the situation:

We have a list of about 1,000 contacts (Lawyers in the area our court serves) with name and email address. I've been asked to create an email distribution list that can be used to sent emails to all of the external users on that list. I've seen various articles using the Exchange Management Shell and the Import-csv command piped through a ForEach-Object to a New-MailContact to set up the contacts.

However, Exchange Management Shell is rather unhelpful, and it isn't working.

What I believe I need to do is:

1) Set up a new distribution group using the Exchange Management Console. Let's say this new distribution group (which appears in the list of Distribution Groups under Recipient Configuration) is called "FloridaBar".

2) Make sure I have a csv file of the information I want to import.

3) Open Exchange Management Shell, and enter the following command:

Import-csv C:\filename.csv | ForEach-Object { New-MailContact -Name 

$."NameColumnName" -ExternalEmailAddress $."EmailAddressColumn" -org FloridaBar

Now, creating 1,000+ contacts in active directory - I assume that shouldn't be an issue.

Do I have the "-org" parm wrong? Do I need to spell out the complete organization unit name (my.domain.name/Users/FloridaBar)?

Is there a better way of doing this?

Thanks in advance

Ken