 | | | open iptables for sendmail | open iptables for sendmail 2003-04-29 - By Antonio Galea
Back
On Tue, 29 Apr 2003, Martin Ramskogler wrote:
> :INPUT DROP [50957:5396723]
> :FORWARD DROP [0:0]
> :OUTPUT ACCEPT [336966:250894376]
> [0:0] -A INPUT -s 127.0.0.1 -p tcp -m tcp --dport 25 -j ACCEPT
> [0:0] -A INPUT -s 10.40.26.2 -p tcp -m tcp --dport 25 -j ACCEPT
> [0:0] -A INPUT -s 127.0.0.1 -p tcp -m tcp --sport 25 -j ACCEPT
> [0:0] -A INPUT -s 10.40.26.2 -p tcp -m tcp --sport 25 -j ACCEPT
> [0:0] -A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
> [0:0] -A OUTPUT -p tcp -m tcp --sport 25 -j ACCEPT
>
> 10.40.26.2 is the IP of the server. When I stop iptables, everything
> works fine, the mails are sent. When I start iptables, the mails don't
> come out of the box.
>
It seems ok, but are these the only rules on your iptables packet filter?
Remember that the order of rules _IS_ important. Hint: try logging what you
are DROPping in the INPUT chain...
Ant9000
--
__ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
Dr. Antonio Galea N e t W i s e http://www.netwise.it
Sviluppo tecnico Tecnologie per il Web Tel 0461.421016 Fax 0461.426021
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----
I have the heart of a child; I keep it in a jar on my desk.
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----
--
Earn $52 per hosting referral at Lunarpages.
|
|
|