LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Iptables rule for SMTP on NAT (https://www.linuxquestions.org/questions/linux-networking-3/iptables-rule-for-smtp-on-nat-529178/)

mblames 02-14-2007 11:17 PM

Iptables rule for SMTP on NAT
 
Hi all,
Does anyone know how to make iptables rules for SMTP for the NAT ?Cause http://cbl.abuseat.org/ always block my NAT's IP, it said that my IP was spamming . I already check all my clients packages with iftop and also MRTG. There is nothing wrong with my clients. But I noticed that they sent messages massively,using group lists(group@blabla.net) sometimes constantly. I already added rules like this to my iptables :

-A FORWARD -d xx.xx.xx.xx -p tcp --dport 25 -j ACCEPT
-A FORWARD -s xx.xx.xx.xx -p tcp --dport 25 -j ACCEPT
-A FORWARD -p tcp --dport 25 -j DROP

Im tryin to force my clients thru smtp ports, so that site wont block my NAT's IP.
Will you help me configure iptables for the NAT??

Regards

callmetimmay 02-15-2007 12:10 AM

Quote:

Originally Posted by mblames
Hi all,
Does anyone know how to make iptables rules for SMTP for the NAT ?Cause http://cbl.abuseat.org/ always block my NAT's IP, it said that my IP was spamming . I already check all my clients packages with iftop and also MRTG. There is nothing wrong with my clients. But I noticed that they sent messages massively,using group lists(group@blabla.net) sometimes constantly. I already added rules like this to my iptables :

-A FORWARD -d xx.xx.xx.xx -p tcp --dport 25 -j ACCEPT
-A FORWARD -s xx.xx.xx.xx -p tcp --dport 25 -j ACCEPT
-A FORWARD -p tcp --dport 25 -j DROP

Im tryin to force my clients thru smtp ports, so that site wont block my NAT's IP.
Will you help me configure iptables for the NAT??

Regards

while I don't quite understand your post completely... if you have 2 nics setup, one outside, one inside... here's the actual command I would use to forward to the smtp server on the localside...

iptables -t nat -A PREROUTING -p tcp --dport 25 -j DNAT --to 192.168.0.100

change that ip address to whatever computer is running your smtp server.......

mblames 02-15-2007 12:52 AM

All I want that my NAT's IP wont be block anymore by the http://cbl.abuseat.org/.
Coz everytime my clients send mails (using mailing group), it always block my IP.
anyway I'll try it
Thanks for your reply

Regards

callmetimmay 02-15-2007 06:06 PM

If that domain is blocking mail coming from you or people in your network, you have to email the people at that domain...

mblames 02-15-2007 11:08 PM

well, until now its working fine
i always monitoring with iftop, to see whats going on..
ill report if something going on

Regards


All times are GMT -5. The time now is 05:44 AM.