Shorewall Help Needed Pls

Discussion in 'Installation/Configuration' started by mkhurram92, Mar 24, 2011.

  1. mkhurram92

    mkhurram92 New Member

    hi all there

    i have configured shorewall using webmin on ubuntu 10.10 with DSL with dynamic IP from ISP. Internet is working fine but Outlook mail are not going ????

    Is there anything block or what ???
    my policy is as under

    loc $FW ACCEPT
    $FW any ACCEPT
    any any REJECT

    for internet i define a rule for specific IP to use it
    Accept loc:{IP} net
     
  2. falko

    falko Super Moderator Howtoforge Staff

    Did you open the ports 25, 110, and 143 in the firewall?

    What's the output of
    Code:
    netstat -tap
    ? Any errors in the mail log?
     
  3. mkhurram92

    mkhurram92 New Member

    Thanks for ur response Falko,

    i share my internet using the iptables rule below
    1. iptables -A FORWARD -o eth0 -i eth1 -s 192.168.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
    2. iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
    3. iptables -A POSTROUTING -t nat -j MASQUERADE

    Then implement Shorewall after sharing internet.... there are policies as under in my shorewall

    loc $FW ACCEPT
    $FW any ACCEPT
    any any REJECT

    Nothing more than this implemented in my enviornment... :(

    Just a rule that allow internet for specific IP as under

    Accept Zone loc:192.168.1.1, 192.168.1.2 Zone net any

    Is there any thing wrong here in rules or policies ???
     
  4. mkhurram92

    mkhurram92 New Member

    netstat -tap
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 *:ssh *:* LISTEN 1364/sshd
    tcp 0 0 localhost.localdoma:ipp *:* LISTEN 1326/cupsd
    tcp 0 52 webmin:ssh Leoperd-PC.local:50414 ESTABLISHED 2460/sshd: nasrine
    tcp 0 0 webmin:ssh 192.168.100.151:50023 ESTABLISHED 2274/sshd: nasrine
    tcp6 0 0 [::]:ssh [::]:* LISTEN 1364/sshd
    tcp6 0 0 webmin:ipp [::]:* LISTEN 1326/cupsd
     
  5. falko

    falko Super Moderator Howtoforge Staff

    There's no Postfix and no POP3/IMAP server running. Please start them.
     
  6. mkhurram92

    mkhurram92 New Member

    Hi thanks for ur kind efforts for me... i just resolved this issue using some rules
    as follows


    ACCEPT loc:192.168.100.28,192.168.100.101,192.168.100.104,192.168.100.150,192.168.100.151,192.168.100.152,192.168.100.153,192.168.100.154,192.168.100.155,192.168.100.156,192.168.100.157,192.168.100.158,192.168.100.161,192.168.100.251 net all
    ACCEPT all all tcp 25
    ACCEPT all all tcp 110
    ACCEPT all all tcp 143
    ACCEPT all fw tcp 22
    ACCEPT net fw tcp 10000
     

Share This Page