Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
02-21-2006, 07:15 PM
|
#1
|
Member
Registered: Jan 2006
Location: North Carolina
Distribution: Ubuntu
Posts: 51
Rep:
|
Why is my port 25 still blocked
I'm running FC4 with SElinux and firewall turned off. I'm behind a hardware firewall that passes ports FTP,SMTP, SSH, POP, IMAP. However, I can't receive incoming email. I'm using postfix
1. grc.com shields up says all the port listed above are open except 25 (SMTP).
2. I can telnet localhost 25 and it works.
3. I can email to myself from myself and it works correctly.
4. I can't telnet port 25 from another machine in the same subnet plugged into the same Linksys router/switch
5. I can from another machine on the same subnet login via squirrelmail to read the self-to-self email test.
6. I can email from my system to another address outside without a problem. Just don't get any replies.
Does anyone know what to look at next?
Jim A
|
|
|
02-21-2006, 07:55 PM
|
#2
|
Senior Member
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658
Rep:
|
Is the mail daemon listening on the proper network address? Most distros now ship with a mail daemon that listens on localhost (127.0.0.1) so it can send and receive mail to itself as well as send outgoing mail to remote systems. However it won't be able to receive incoming mail from remote systems. Check 'netstat -pantu' and see what IP the daemon is listening on. If it's the wrong one, you likely just need to edit your mail config file.
|
|
|
02-21-2006, 07:56 PM
|
#3
|
Senior Member
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109
Rep:
|
Oops. Ignore this post. Didn't read No. 4.
Last edited by ilikejam; 02-21-2006 at 07:57 PM.
|
|
|
02-21-2006, 09:09 PM
|
#4
|
Member
Registered: Jan 2006
Location: North Carolina
Distribution: Ubuntu
Posts: 51
Original Poster
Rep:
|
netstat output
The only line in 'netstat -pantu' output that mentions port 25 is:
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2454/master
Not sure what that means as I'm running Postfix.
Jim Abernathy
|
|
|
02-21-2006, 09:58 PM
|
#5
|
Senior Member
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658
Rep:
|
Yup. That's the mail daemon and it's listening on localhost. "Master" is just the postfix master process. Because it's only listening on localhost it can only receive local mail. The postfix config should be in /etc/postfix/main.cf. Scroll down the config to the section on "RECEIVING MAIL" and see if the inet_interface directive is set to localhost (you'll see several different entries but only one will be uncommented). If it's set to localhost, then simply comment out that line with the '#' and then uncomment the line that reads "#inet_interfaces = all".
|
|
|
02-21-2006, 09:59 PM
|
#6
|
Member
Registered: Jan 2006
Location: North Carolina
Distribution: Ubuntu
Posts: 51
Original Poster
Rep:
|
Am I getting closer, or moving the problem?
Thanks for the 'netstat' tip.
Okay, I moved back to sendmail, where I have more control over the configuarion. I now have port 25 listening everywhere and I get inbound email that I wasn't getting prior to this.
However, I'm now getting relay refusal messages from earthlink. They told me at tech support to use a authenticated smtp server and setup the SMARTHOST define in sendmail.mc. Only problem with that is it require a username and password. Usually, that's my full earthlink email address and password. I don't have any examples or doc to tell me the syntax of SMARTHOST other than the name of the ISP's server.
Any ideas?
Jim A
|
|
|
02-21-2006, 10:14 PM
|
#7
|
Senior Member
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658
Rep:
|
Sorry, I've never setup smarthosts before. This might be helpfull, if not you might want to start a new thread on how to configure smarthosts in the networking forum.
|
|
|
02-21-2006, 10:32 PM
|
#8
|
Member
Registered: Sep 2005
Location: India
Distribution: Redhat Debian
Posts: 36
Rep:
|
Hi jfaberna,
You should have an entry like the one given below
tcp 0 0 127.0.0.1:10025 0.0.0.0:* LISTEN 11303/master
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 11303/master
The above statement implies that the computer is waiting under the port 25 under the LAN and localhost IP.
Your mail server is configured to accept mails from localhost
Please check your mail server for its configurations
Thanks
Philix
Jesus Loves you too
|
|
|
02-21-2006, 10:46 PM
|
#9
|
Senior Member
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658
Rep:
|
Seriously, please read the thread.
|
|
|
All times are GMT -5. The time now is 03:30 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|