Вот конфиг
memory-size iomem 25
ip subnet-zero
no ip source-route
ip inspect name FW tcp
ip inspect name FW udp
ip inspect name FW smtp
ip audit notify log
ip audit po max-events 100
interface Ethernet0
description Interface to DMZ
ip address 172.X.X.1 255.255.255.0
ip access-group DMZ out
ip nat inside
half-duplex
no cdp enable
interface Ethernet0.1
description Interface to DMZ
no cdp enable
interface Ethernet0.2
no cdp enable
interface FastEthernet0
description Interface to LAN
ip address 192.X.X.1 255.255.0.0
ip access-group inet in
ip access-group 121 out
ip nat inside
ip inspect FW in
speed auto
no cdp enable
interface Serial0
description Interface to ISP (Co)
ip address 62.X.X.14 255.255.255.252
ip access-group 103 in
ip nat outside
ip inspect FW in
no cdp enable
ip nat pool rost 195.X.X.136 195.X.X.143 netmask 255.255.255.248
ip nat inside source list lan pool rost overload
ip nat inside source static 172.X.X.204 195.X.X.130
ip nat inside source static 172.X.X.202 195.X.X.128
ip nat inside source static 172.X.X.203 195.X.X.129
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
ip route 195.X.X.128 255.255.255.255 Ethernet0
ip route 195.X.X.129 255.255.255.255 Ethernet0.1
ip route 195.X.X.130 255.255.255.255 Ethernet0.2
no ip http server
ip access-list extended DMZ
permit tcp any any eq smtp
permit tcp any eq smtp any
permit ip 192.168.0.0 0.0.255.255 any
permit udp host 194.X.X.80 eq domain any
permit udp host 194.X.X.10 eq domain any
permit icmp any any echo
permit icmp any any echo-reply
permit tcp host 195.X.X.193 any eq pop3
permit tcp 172.X.X.203 0.0.0.4 any
permit tcp any 172.X.X.203 0.0.0.4
permit tcp 172.X.X.204 0.0.0.1 any
permit tcp any 172.X.X.204 0.0.0.1
ip access-list extended inet
permit tcp 192.168.1.0 0.0.0.255 any eq smtp
permit tcp 192.168.1.0 0.0.0.255 any eq www
permit tcp 192.168.1.0 0.0.0.255 any eq pop3
permit tcp 192.168.1.0 0.0.0.255 any eq ftp-data
permit tcp 192.168.1.0 0.0.0.255 any eq ftp
permit tcp 192.168.4.0 0.0.0.255 any eq smtp
permit tcp 192.168.4.0 0.0.0.255 any eq pop3
permit tcp 192.168.4.0 0.0.0.255 any eq www
permit tcp 192.168.2.0 0.0.0.255 any eq smtp
permit tcp 192.168.2.0 0.0.0.255 any eq pop3
permit ip 192.168.100.0 0.0.0.255 any
permit icmp 192.168.0.0 0.0.255.255 any
permit udp 192.168.0.0 0.0.255.255 host 194.X.X.80 eq domain
permit udp 192.168.0.0 0.0.255.255 host 194.X.X.10 eq domain
ip access-list extended lan
deny ip 192.168.25.0 0.0.0.255 any
permit ip 192.168.0.0 0.0.255.255 any
access-list 10 permit 192.168.100.100 0.0.0.3
access-list 10 permit 192.168.100.104 0.0.0.7
access-list 10 permit 192.168.100.112 0.0.0.3
access-list 103 deny ip 10.0.0.0 0.255.255.255 any
access-list 103 deny ip 172.16.0.0 0.15.255.255 any
access-list 103 deny ip 192.168.0.0 0.0.255.255 any
access-list 103 permit icmp any host 62.X.X.14 echo
access-list 103 permit icmp any host 62.X.X.14 echo-reply
access-list 103 deny ip any host 62.X.X.14
access-list 103 permit ip any any
access-list 121 permit icmp any any
access-list 121 deny ip any any
access-list 150 permit ip host 172.X.X.202 any
access-list 150 permit ip host 172.X.X.203 any
access-list 150 permit ip any host 172.X.X.202
access-list 150 permit ip any host 172.X.X.203
access-list 150 permit ip host 172.X.X.204 any
access-list 150 permit ip any host 172.X.X.204
no cdp run