Hi,
I was wondering if anyone could help me with this problem. I'm running 2
firewalls, both on Solaris 2.6 and both running FW-1 version 4.0 SP5. I'm
using the SMTP security server to check incoming mail to our mail server
with a resource that only allows mail to our domains. The rule looks
something like this
Source : Any Dest : Our mail server Service : SMTP with Resource
(recipient = *@ourdomain.com) ACCEPT
In the SMTP resource, in the security policy, I have specified a mail server
by IP address but no error server.
I get this problem on both firewalls where there's lots of error messages
being generated in the /etc/fw/asmtpd.log file, as much as 5 Meg a day is
logged to this file, at the bottom of this e-mail is an example of part of
the log showing the kind of error messages I'm getting.
The main bulk of the errors are the ones that say Bad file number (see end
of e-mail).
resolver_gethostbyaddr() failed.: Bad file number
I have my /etc/fw/conf/smtp.conf file as follows
timeout 900
scan_period 2
resend_period 180
abandon_time 432000
maxrecipients 100
rundir /etc/fw/spool
postmaster postmaster
default_server
error_server xxx.xxx.xxx.xxx
where xxx.xxx.xxx.xxx is the ip address of a mail server.
my /etc/nsswitch.conf file is setup with the line
hosts: files dns
for host resolution, as far as I can see this is okay.
I'd be very grateful for any suggestions.
Thanks & Regards,
Paul.
<---------- Part of log file (internal IPs replaces with x's ---------->
14:02:17 fd: 114 src: 206.191.0.217 dst: xxx.xxx.xxx.xxx Connection
prematurel
y closed.
resolver_gethostbyaddr() failed.: Error 0
14:02:17 fd: 181 src: 63.205.145.74 dst: xxx.xxx.xxx.xxx Connection I/O
failur
e.
14:02:17 fd: 169 src: 205.180.135.66 dst: xxx.xxx.xxx.xxx Connection I/O
failu
re.
resolver_gethostbyaddr() failed.: Bad file number
resolver_gethostbyaddr() failed.: Bad file number
resolver_gethostbyaddr() failed.: Bad file number
resolver_gethostbyaddr() failed.: Bad file number
14:02:32 fd: 25 src: 195.12.176.60 dst: xxx.xxx.xxx.xxx Connection aborted
by
peer.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
