postfix connectivity issues

Discussion in 'Installation/Configuration' started by alexnz, Oct 20, 2006.

  1. alexnz

    alexnz New Member

    im having an issue connecting to my mail server on port 25

    i can connect to it on port 25 on the linux box through - telnet localhost 25

    i can also connect to it through my windows machine on the LAN using the same above command.

    Code:
    dns:/home/admin# telnet 10.0.0.10 25
    Trying 10.0.0.10...
    Connected to 10.0.0.10.
    Escape character is '^]'.
    220 alexalextest.dyndns.org ESMTP Postfix (Debian/GNU)
    
    but when i try and connect to it from another location (over the internet) it just comes up with a blanking cursor and no prompt, which then forces me to ctrl c to get out,

    i have checked all postfix config files and ive followed the perfect setup howto on the forums -

    im using debian 3.1r2

    here is my main.conf

    Code:
    
    # See /usr/share/postfix/main.cf.dist for a commented, more complete version
    
    smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
    biff = no
    
    # appending .domain is the MUA's job.
    append_dot_mydomain = no
    
    # Uncomment the next line to generate "delayed mail" warnings
    #delay_warning_time = 4h
    
    myhostname = alexalextest.dyndns.org
    alias_maps = hash:/etc/aliases
    alias_database = hash:/etc/aliases
    myorigin = /etc/mailname
    #mydestination = dns.strangled.net, localhost, localhost.localdomain, localhost
    relayhost =
    mynetworks = 127.0.0.0/8
    mailbox_command = procmail -a "$EXTENSION"
    mailbox_size_limit = 0
    recipient_delimiter = +
    inet_interfaces = all
    smtpd_sasl_local_domain =
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_security_options = noanonymous
    broken_sasl_auth_clients = yes
    smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,rejec
    smtpd_tls_auth_only = no
    smtp_use_tls = yes
    smtpd_use_tls = yes
    smtp_tls_note_starttls_offer = yes
    smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
    smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
    tls_random_source = dev:/dev/urandom
    virtual_maps = hash:/etc/postfix/virtusertable
    mydestination = /etc/postfix/local-host-names
    
    my hostnames are set correctly, i have double checked everything and i cant seem to findout why i cant connect to my server from an outside internet ip address, i have DMZ set on my router to foward to my servers ip address

    agian i can connect to the server and it comes up with the smtp prompt from within the local lan and localhost, so im stumped, can anyone give any clues?
     
    Last edited: Oct 20, 2006
  2. FreeVPS

    FreeVPS New Member

    I could be wrong but it's doing what Exim sometimes does when it cannot get the reverse dns lookup quick enough - I can get a connection after sometime:

    +OK POP3 alexalextest.dyndns.org v2003.83 server ready

    Do you have rev dns setup right on your own ip address?
     
  3. alexnz

    alexnz New Member

    ive double check resolv.conf and hostname files and they are all set correctly,
     
  4. FreeVPS

    FreeVPS New Member

    I don't mean on the server, I mean the IP address your ISP is dishing out to you.
     
  5. alexnz

    alexnz New Member

    i dont think this has to do with reverse dns lookups, ive had similar boxes on other domain names without reversals that dont have this issue =/

    here is my mail.log

    Code:
    Oct 20 12:03:47 alexalextest postfix/smtpd[2696]: connect from unknown[10.0.0.3]
    Oct 20 12:03:49 alexalextest postfix/smtpd[2696]: disconnect from unknown[10.0.0.3]
    
    but i see no connects from my work address, hmmmm
     
  6. alexnz

    alexnz New Member

    try connecting on port 25 - smtp is the issue not pop3
     
  7. FreeVPS

    FreeVPS New Member

    Code:
    Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2006-10-20 00:25 BST
    Interesting ports on 222-153-247-170.jetstream.xtra.co.nz (222.153.247.170):
    (The 1648 ports scanned but not shown below are in state: closed)
    PORT     STATE    SERVICE
    21/tcp   open     ftp
    22/tcp   open     ssh
    25/tcp   filtered smtp
    80/tcp   open     http
    81/tcp   open     hosts2-ns
    110/tcp  open     pop3
    143/tcp  open     imap
    443/tcp  open     https
    993/tcp  open     imaps
    995/tcp  open     pop3s
    3128/tcp filtered squid-http
    3389/tcp open     ms-term-serv
    
    Nmap run completed -- 1 IP address (1 host up) scanned in 36.821 seconds
    [root@centos ~]#
    
    Look at your firewall :)
     
  8. alexnz

    alexnz New Member

    ahh fixed it

    found out that my new isp port filters 25, so got them to remove that :)

    thanks
     

Share This Page