943,402 Members | Top Members by Rank

Aug 27th, 2003
0

Iptables

Expand Post »
Wow this is a bit weird. Well I'm not an expert in Linux. But I know that iptables responsible for the system firewall. So i went in to /etc/sysconfig and vim the iptables and i see that port 25 and 110 is accept. How come when I telnet the port 25 and 110, it is show that the connection is refuse. I did open up my router firewall also for the port 25 and 110. So I'm stuck at this point. Don't know why these two ports is not open. I need these two ports for my sendmail to be able to send and receive email to the outside source. Please lighten up me with your solution, anyone?

I'm really appreciated if you can, and I also really appreciated if you try. Thanks guy...
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
argh2005 is offline Offline
8 posts
since Aug 2003
Aug 27th, 2003
0

Re: Iptables

I'm a bit confused when you say you are trying to telnet into ports 25 and 110. Do you mean you're trying to ping your server? You'll need to do a portscan to see if those ports are open or not.

Telnet is the daemon that lets you run a shell remotely, and is usually done via port 23.
Administrator
Staff Writer
Reputation Points: 1422
Solved Threads: 162
The Queen of DaniWeb
cscgal is offline Offline
13,645 posts
since Feb 2002
Aug 27th, 2003
0

Iptables

I did try to do nmap -sS for localhost and etc.. 25 and 110 is in the state closed. But my router configuration is open for it.. and iptables' port 25 and 110 is accepting. When i do telnet.. (usually you telnet a port is to see if the port is accept the connection or not.. so you'll know it's open or closed).. for 25 and 110, it say connection refuse, but i telnet port 22.. and port 22 is open for a connection.

So any suggestion?

Thanks for replying to me so fast ...
Reputation Points: 10
Solved Threads: 0
Newbie Poster
argh2005 is offline Offline
8 posts
since Aug 2003
Aug 27th, 2003
0

Re: Iptables

This isn't exactly my field of expertise. However, does it make sense that perhaps despite the ports being open through your firewall, sendmail is not configured properly, and therefore there is no daemon listening to those open ports, to respond to you when you try to telnet to them?
Administrator
Staff Writer
Reputation Points: 1422
Solved Threads: 162
The Queen of DaniWeb
cscgal is offline Offline
13,645 posts
since Feb 2002
Aug 27th, 2003
0

Iptables

Yes, it sort of make sense. But I did run a check on my sendmail status, and it's up and running. About sendmail configuration is default from beginning, I didn't change anything, but only two line of codes. What I did was comment out the following line:

DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

That is, place a dnl in front so it looks like the following:

dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

Then I remake sendmail.cf file by moving into the /etc/mail directory and typing in make -C /etc/mail

Then I restart sendmail. (/etc/init.d/sendmail/restart)

I think this is the right way to configure the sendmail so far. If you know what I did wrong, please let me know thanks.

So far, I'm clueless because my sendmail is not working the way it suppose to work, and the port 25 and 110 look like it was closed when I do the nmap, but I did check the iptables and see it was open, and my router also open those 2 ports.

.. Thanks for trying to help.
Reputation Points: 10
Solved Threads: 0
Newbie Poster
argh2005 is offline Offline
8 posts
since Aug 2003
Nov 19th, 2007
0

Re: Iptables

There are other setting to consider. I've not used sendmail, but with postfix, there are a few things in the config file (/etc/postfix/main.cf in Fedora) that need to be unblocked:

mydomain = cs.ukzn.ac.za
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, $mydomain

This is of course a late reply (years late!) but I was searching for stuff on iptables and maybe this postfix info could help someone one day

Often if one thing doesn't work, something else is worth a shot
Reputation Points: 56
Solved Threads: 11
Junior Poster
PoovenM is offline Offline
146 posts
since Aug 2006
Nov 19th, 2007
0

Re: Iptables

Click to Expand / Collapse  Quote originally posted by PoovenM ...
There are other setting to consider. I've not used sendmail, but with postfix, there are a few things in the config file (/etc/postfix/main.cf in Fedora) that need to be unblocked:

mydomain = cs.ukzn.ac.za
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, $mydomain

This is of course a late reply (years late!) but I was searching for stuff on iptables and maybe this postfix info could help someone one day

Often if one thing doesn't work, something else is worth a shot
You do realize that you're reviving a thread that is FOUR YEARS old, yes?
Team Colleague
Reputation Points: 2240
Solved Threads: 338
Vampirical Lurker
John A is offline Offline
5,055 posts
since Apr 2006

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Linux Networking Configuration Forum Timeline: IPTables blocks all incoming traffic from other networks
Next Thread in Linux Networking Configuration Forum Timeline: Thinstation iptables state modul missing





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC