On 05/14/2011 01:46 AM, MAKSNET D.O.O. Beograd wrote:
eric was right about our router/firewall (we do not used qmail firewall)
...
i create rules for exsclude qmail server IP, (port 25), and now its work
but, huge but, ...
we used other mail server on this IP, over 5 years.
we did not change firewall rules for mail IP i think last 1 year.
i change this old mail server with qmail, and stay on same IP, there is
no firewall rules change.
how is posible, one mail server work, other not ... with same firewall
rules ?
That's hard to say w/out knowing anything about the firewall you're
using. Also, mail servers vary considerably. I think Jake was on the
right track though, that DNS was somehow involved. QMT uses DNS more so
than some mail servers.
also, why yahoo, gmail, facebook, etc ... work without exclude qmail IP
in firewall ?
Perhaps their DNS is configured a little differently, or they handle the
SMTP session behavior better than the server that was being blocked by
your firewall. The question really boils down to your firewall, and why
it blocked certain packets.
is there some port or other stuff, witch qmail used to communication
with other mail server ?
Nope. Just port 25 traffic. This is apparent by the fact that opening
port 25 to QMT's IP fixed the problem.
There appears to have been some content filtering going on in your
firewall, above and beyond simple port blocking. That's speculation
though, because you've told us near nothing about your firewall and its
configuration.
we block port: ssh, telnet, mysql ... service witch not direcly used in
smtp communication.
do you have some idea about this ?
,
marko
Blocking those ports should be fine. If you choose to use an external
firewall, you should leave open the same ports that the firewall.sh
installation script accepts. These are the typical mail related ports.
You should also consider using spamdyke. It does a much more efficient
job of RBL checking than the stock rblsmtpd program does, in addition to
a variety of other anti-spam measures.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
