I have installed qmail server in my FreeBSD 4.1.1-stable box, I've also
got tcpserver, courier-imap running, ipfilter and IPsec running as well.
IPsec is running between my cllient and server box. The following
diagram illustrate the my basic networking:

Client (FreeBSD 4.1-stable) -> Server (FreeBSD 4.1.1-stable) ->Internet
(sendmail)                                        (Qmail server)
sec.rock.com                                    fastline.rock.com

I don't think ipfilter and IPSec blocks the connection, because server
box (FreeBSD 4.1.1-stable) can send email to the client machine (FreeBSD
4.1-stable). The problem is the client box cannot send email to the
server. Whenever it sends email, an error msg will be raised by sendmail
with the "Connection reset by server" err msg. Besides, server can
client can ping each other, and client can ping and lynx outside wild
wild internet websites. I can send emails within my server box. email
can be sent to theh client box.

Here is the error msg from /var/log/maillog:
Oct  2 14:58:04 sec sendmail[2205]: e91M8Zv00283:
[EMAIL PROTECTED], ct
laddr=swun (1000/1000), delay=05:49:29, xdelay=00:00:00, mailer=esmtp,
pri=12008
14, relay=fastline.rock.com., dsn=4.0.0, stat=Deferred: Connection reset
by fast
line.rock.com.

My nmap -v in my client machine shows:
Port       State       Service
22/tcp     open        ssh
25/tcp     open        smtp
111/tcp    open        sunrpc
587/tcp    open        submission

Nmap -v in the server machine shows:
Port       State       Service
22/tcp     open        ssh
25/tcp     open        smtp
53/tcp     open        domain
110/tcp    open        pop-3
143/tcp    open        imap2
5432/tcp   open        postgres
6000/tcp   open        X11

I run tcpserver with:
/usr/local/bin/tcpserver -x/usr/local/etc/tcp.smtp.cdb \
        -u$QMAILDUID -g$NOFILESGID 0 smtp /var/qmail/bin/rblsmtpd\
        /var/qmail/bin/qmail-smtpd 2>&1 &

The portmap_enable and sendmail_enable are set to NO in file
/etc/rc.conf.

Can anyone tell me what may be wrong with it?

Thanks
Sam.

Reply via email to