Ok, panic over.

What I found was that all port 25 packets were being denied. The
/etc/e-smith/templates/etc/rc.d/init.d/masq/45AllowSMTP had changed and
would not parse thus disallowing all port 25 packets. I restored 45AllowSMTP
from a backup, expanded the masq template, restarted masq and all is well.
Now that I know how to fix it I am going to find out what broke it in the
first place.

Several minutes later

the culprit is

e-smith-mailfront-0.3.7-01.noarch.rpm

This is from 5.6 right and 5.6 uses iptables

45AllowSMTP (5.5)

{
    my $status = $DB->get('smtpfront-qmail')->prop('status') || "disabled";
    my $access = $DB->get('smtpfront-qmail')->prop('access') || "public";

    if ( ($status eq "enabled") and ($access eq "public") )
    {
        $OUT .= <<'HERE';
    /sbin/ipchains --append input -p tcp -s 0/0 -d $OUTERNET 25 -j ACCEPT
    /sbin/ipchains --append output ! -y -p tcp -d 0/0 -s $OUTERNET 25 -j
ACCEPT
HERE
    }
}

45AllowSMTP (5.6)

{
    my $status = ${'smtpfront-qmail'}{'status'} || "disabled";
    my $access = ${'smtpfront-qmail'}{'access'} || "public";

    $OUT = allow_tcp_in(25,
            ($status eq "enabled") && ($access eq "public"));
}

Jon

> -----Original Message-----
> From: Darrell May [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, November 21, 2002 2:32 PM
> To: [EMAIL PROTECTED]; Jon Blakely - CTS Howick;
> [EMAIL PROTECTED]; 'e-smith-devinfo'
> Subject: RE: [e-smith-devinfo] [ALPHA] mailrules for SME5.5 available
>
>
>
> Jon Blakely - CTS Howick <[EMAIL PROTECTED]> said:
>
> > I have just tried your alpha contrib. I am no longer
> receiving external
> > e-mail, it is piling up at my backup mx. Internal is fine.
>
> As I reported in my initial post:
>
> http://www.mail-archive.com/devinfo@lists.e-smith.org/msg10727.html
>
> <snip>
> As suggested by the location, consider this alpha and highly
> experimental
> for non-production testing only.  I fully expect this may
> break something so
> use at your own risk!  I have tested internal mail and outbound mail
> delivery only.  I have NOT tested external inbound mail.
> </snip>
>
> Thanks for testing external mail John.  Take a look at the
> smtpfront-qmail
> log file for anything of note and report back:
>
> /var/log/smtpfront-qmail/current
>
> Regards,
>
> --
> Darrell May
> DMC Netsourced.com
> http://myEZserver.com
>
>
> --
> Please report bugs to [EMAIL PROTECTED]
> Please mail [EMAIL PROTECTED] (only) to discuss security issues
> Support for registered customers and partners to [EMAIL PROTECTED]
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Searchable archive at
> http://www.mail-archive.com/devinfo%40lists.e-smith.org
>
>


--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Searchable archive at http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to