mails not going thru'

----- Original Message -----
From: Jason Opperisano <[email protected]>
Date: Saturday, May 7, 2005 8:17 pm
Subject: Re: mails not going thru'

Quoted 7 lines · On Sat, May 07, 2005 at 10:14:49AM +0500, [email protected] wrote:

Review

Quoted 6 lines

*filter
:FORWARD ACCEPT [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]

(quoted diff) +0 -2

-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -p tcp -m tcp -i eth1 --dport 3128 --sport 1024:65535 -

j

Quoted 10 lines

ACCEPT> -A INPUT -p udp -m udp -i eth1 --dport 3128 --sport 1024:65535 -j ACCEPT

Review

Quoted 7 lines

(quoted diff) +0 -7

-A INPUT -s 62.0.0.0/255.0.0.0 -i eth0 -j REJECT
-A INPUT -p tcp -m tcp -s 217.81.0.0/255.255.0.0 -i eth0 -j REJECT
-A INPUT -i eth0 -j DROP
-A INPUT -p tcp -m tcp -i eth1 --sport 80 -j DROP
-A INPUT -m state -i eth1 --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p tcp -i eth1 -o eth0 --dport 25 --sport 1024: -j 

ACCEPT --syn

Quoted 8 lines

Quoted 1 line

-A FORWARD -p tcp -i eth1 -o eth0 --dport 110 --sport 1024: -j

ACCEPT --syn

Quoted 1 line

-A FORWARD -p tcp -i eth1 -o eth0 --dport 1863 --sport 1024: -j

ACCEPT --syn

Quoted 1 line

-A FORWARD -p tcp -i eth1 -o eth0 --dport 5050 --sport 1024: -j

ACCEPT --syn

the policy of your FORWARD chain is set to ACCEPT, so even if

there's> traffic you haven't accounted for in these rules--it will still be

Quoted 1 line

allowed through. you have a rule that allows SMTP (TCP 25) out--

so i

Quoted 3 lines

bet if you type:

telnet 64.233.185.27 25

[varun@saamail varun]$ telnet 64.233.185.27 25
Trying 64.233.185.27...

No response

Quoted 5 lines

which is the IP of gmail's preferred MX, you'd get connected. if you'reFORWARD policy was DROP, i'd say that the reason you can't send mail from
a client machine is because you have no rule allowing DNS traffic

out:>

Quoted 1 line

-A FORWARD -i eth1 -o eth0 -p udp --sport 1024: --dport 53 -j

ACCEPT> -A FORWARD -i eth1 -o eth0 -p tcp --syn --sport 1024: -- dport 53 \

Quoted 3 lines

-j ACCEPT

but since those packets will be accepted by the chain policy, my

only> guess is that you do not have any valid DNS servers configured on your

Quoted 3 lines

client machines--on a *nix box:

cat /etc/resolv.conf

[varun@saamail varun]$ cat /etc/resolv.conf
search saice.edu
nameserver 203.145.184.13

# ppp temp entry

Quoted 3 lines

-j

Strange, I can browse but I can't ping ISP gateway and ISP DNS.

I can ping ISP gateway and ISP DNS from server.

Varun

watch -d iptables -nvL -> gives the following