firewall puzzle

Discussion in 'General' started by tjd, Dec 2, 2006.

  1. tjd

    tjd New Member

    The firewall appears to block the mail system. Anyone any clues on ip settings or such to overcome this?
     
    tjd, Dec 2, 2006
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Which firewall are you taliking about, the ISPConfig firewall or the firewall from your linux distribution?

    Which linux distribution do you use?
    Please post the output of:

    iptables -L
     
    till, Dec 2, 2006
    #2
  3. tjd

    tjd New Member

    Thanks Till, Running fedora 6 and talking about the ISPConfig wall. Here 'tis

    Chain INPUT (policy DROP)
    target prot opt source destination
    DROP tcp -- anywhere 127.0.0.0/8
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere
    DROP all -- BASE-ADDRESS.MCAST.NET/4 anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain FORWARD (policy DROP)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    DROP all -- anywhere anywhere

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere

    Chain INT_IN (0 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain INT_OUT (0 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere
    ACCEPT all -- anywhere anywhere

    Chain PAROLE (10 references)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere

    Chain PUB_IN (4 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
    ACCEPT icmp -- anywhere anywhere icmp echo-reply
    ACCEPT icmp -- anywhere anywhere icmp time-exceeded
    ACCEPT icmp -- anywhere anywhere icmp echo-request
    PAROLE tcp -- anywhere anywhere tcp dpt:ftp
    PAROLE tcp -- anywhere anywhere tcp dpt:ssh
    PAROLE tcp -- anywhere anywhere tcp dpt:smtp
    PAROLE tcp -- anywhere anywhere tcp dpt:domain
    PAROLE tcp -- anywhere anywhere tcp dpt:http
    PAROLE tcp -- anywhere anywhere tcp dpt:hosts2-ns

    I haven't changed any settings except to add two ports for the named update. But the problem actually predates that.

    Regards
     
    tjd, Dec 2, 2006
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    SMTP is not blocked, but it looks like pop3 is not enabled. Please open the port for pop3 in the firewall.
     
    till, Dec 3, 2006
    #4

Share This Page