> >ipchains -A input -j ACCEPT -P tcp -s 0.0.0.0/0 25 \
> >                             -d  GatewayAddress/32 25 -l

Looking closer at this, I can see why this rule does not work.  It says
to allow and log packets from port 25 to port 25.  Now, if a client is
attempting to reach your SMTP server, the destination port *will* be 25,
but the source port could be any number at all, and it's very likely
that it will not be 25.  So this rule will never trigger.

You will have better luck if you leave out the "-s" option altogether. 
Filter only on the destination address/port, and it will do what you
want.

-- 
   [EMAIL PROTECTED] (Fuzzy Fox)      || "Nothing takes the taste out of peanut
sometimes known as David DeSimone  ||  butter quite like unrequited love."
  http://www.dallas.net/~fox/      ||                       -- Charlie Brown


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to