[ale] SMTP and firewall problems

Eric_Brubakken at aoncons.com Eric_Brubakken at aoncons.com
Fri Feb 9 07:18:07 EST 2001




I am currently trying to configure my firewall at home and have run into a
problem with sending mail.  Receiving mail is not a problem just sending - my
firewall script seems to rejecting everything from SMPT (port 25).

Does anyone see problems in the following code?

Thanks

Eric



Here is a snipit from my rc.firewall script:
LOOPBACK_INTERFACE="lo"                 # or your local naming convention
LOCAL_INTERFACE_1="eth1"                # internal LAN interface

IPADDR="64.81.31.123"                   # your IP address
LOCALNET_1="192.168.0.0/24"             # whatever private range you use

ANYWHERE="any/0"                        # match any IP address

NAMESERVER_1="216.254.95.2"                     # everyone must have at least
one
NAMESERVER_2="216.231.41.2"
UNPRIVPORTS="1024:65535"

------------------------------------------------------- problem child area -----------------------------------------------


# SMTP server (25)
# ----------------
    /sbin/ipchains -A input  -i $EXTERNAL_INTERFACE -p tcp  \
             -s $ANYWHERE $UNPRIVPORTS \
             -d $IPADDR 25 -j ACCEPT

    /sbin/ipchains -A output -i $EXTERNAL_INTERFACE -p tcp ! -y \
             -s $IPADDR $UNPRIVPORTS \
             -d $ANYWHERE 25  -j ACCEPT
 ------------------------------------------------------- problem child area -----------------------------------------------




dmesg produces the following:

Packet log: output REJECT eth0 PROTO=6 64.81.31.123:1569 216.32.243.136:25 L=60
S=0x00 I=11622 F=0x0000 T=64 SYN (#30)


--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.





More information about the Ale mailing list