(email) server connection problem : Help
I am Running a mail server (postfix / dovecot) on FreeBSD 8.1 I have 6 different domain names configured with 6 different ip addresses. I cannot log into the server via either ssl for email or ssh on the two domains that are .org and .info The connection is refused. Here is an example copied from a console; shell$ ssh -l LoginName mail.anadarkohs60.com The authenticity of host 'mail.domain_4.com(xx.yy.zzb.174)' can't be established. DSA key fingerprint is {snip} Are you sure you want to continue connecting (yes/no)? no Host key verification failed. shell$ ssh -l LoginName mail.domain_3.org ssh: connect to host mail.domain_3.org port 22: Connection refused shell$ My guess is that it might be sshguard but I see nothing in the logfiles. I can ping to the TLD, mx records, etc check out. Everything works except for my .org and .info domain Any help is greatly appreciated. I hope it is one of those simple things I missed. Thanks in advance Mark Moellering 734.644.4757 Here is my hosts file; current version ::1 localhost 127.0.0.1 localhost mail.main_domain.net xx.yy.zza.69mail.main_domain.net mail xx.yy.zzb.100 mail.domain_1.com xx.yy.zzb.249 mail.domain_2.com xx.yy.zzb.62mail.domain_3.org xx.yy.zzb.174 mail.domain_4.com xx.yy.zzb.180 mail.domain_5.info === # $FreeBSD: src/etc/hosts,v 1.16.34.1.4.1 2010/06/14 02:09:06 kensmith Exp $ # # Host Database Here is my pf.conf #PF Firewall Configuration File #Definitions interface=rl0 table attacks persist file /etc/attackers table sshguard persist scrub in all #lock all traffic out of the server block in on $interface #block ssh and other attacks using sshguard block in quick on $interface from sshguard to any label ssh attack #allow ping, et al pass in on $interface proto icmp from any to $interface #allow in ssh , syslogd , ntp, http and https pass in on $interface proto tcp from any to $interface port 22 pass in on $interface proto udp from any to $interface port 514 pass in on $interface proto udp from any to $interface port 123 #pass in on $interface proto tcp from any to $interface port 80 #pass in on $interface proto tcp from any to $interface port 443 # allow outgoing connections pass out on $interface proto { tcp, udp, icmp } all keep state # allow e-mail / smtp (port 25) pass in on $interface proto tcp from any to $interface port 25 pass in on $interface proto tcp from any to $interface port 110 pass in on $interface proto tcp from any to $interface port 995 pass in on $interface proto tcp from any to $interface port 587 pass in on $interface proto tcp from any to $interface port 465 #Block addresses trying to break in block drop in on $interface from attacks to any ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: (email) server connection problem : Help
On Jun 20, 2011, at 10:05 AM, Mark Moellering wrote: I cannot log into the server via either ssl for email or ssh on the two domains that are .org and .info The connection is refused. Here is an example copied from a console; shell$ ssh -l LoginName mail.anadarkohs60.com The authenticity of host 'mail.domain_4.com(xx.yy.zzb.174)' can't be established. DSA key fingerprint is {snip} Are you sure you want to continue connecting (yes/no)? no Host key verification failed. By telling it no here, you've instructed SSH to treat the host key as invalid; the connection will be closed. shell$ ssh -l LoginName mail.domain_3.org ssh: connect to host mail.domain_3.org port 22: Connection refused shell$ There's no such domain as mail.domain_3.org in the public DNS. Presumably you've changed this information; all I can conclude is that whichever IP address the actual name resolves to isn't running SSH (or it's not listening on that particular IP, or a firewall is blocking it, etc). Regards, -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: (email) server connection problem : Help
On 20-Jun-11 2:00 PM, Chuck Swiger wrote: On Jun 20, 2011, at 10:05 AM, Mark Moellering wrote: I cannot log into the server via either ssl for email or ssh on the two domains that are .org and .info The connection is refused. Here is an example copied from a console; shell$ ssh -l LoginName mail.anadarkohs60.com The authenticity of host 'mail.domain_4.com(xx.yy.zzb.174)' can't be established. DSA key fingerprint is {snip} Are you sure you want to continue connecting (yes/no)? no Host key verification failed. By telling it no here, you've instructed SSH to treat the host key as invalid; the connection will be closed. shell$ ssh -l LoginName mail.domain_3.org ssh: connect to host mail.domain_3.org port 22: Connection refused shell$ There's no such domain as mail.domain_3.org in the public DNS. Presumably you've changed this information; all I can conclude is that whichever IP address the actual name resolves to isn't running SSH (or it's not listening on that particular IP, or a firewall is blocking it, etc). Regards, I changed it but here are the actual hostnames: current version ::1 localhost 127.0.0.1 localhost mail.class-creator.net 69.41.171.69mail.class-creator.net mail 69.41.172.100 mail.saline1990.com 69.41.172.249 mail.pioneer86.com 69.41.172.62mail.grissomhigh1981.org 69.41.172.174 mail.anadarkohs60.com 69.41.172.180 mail.porthuronhighschool.info === DNS checks out. I think I am running ssl. I am checking postfix and dovecot. The odd thing is the ssh. I looked at some old troubleshooting tips and ran netstat -anf inet and this is what it returned Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp4 0 52 69.41.171.69.2268.40.255.141.54052 ESTABLISHED tcp4 0 0 69.41.171.69.3306 68.40.255.141.53928 ESTABLISHED tcp4 0 0 69.41.171.69.3306 68.40.255.141.53927 ESTABLISHED tcp4 0 0 69.41.171.69.3306 68.40.255.141.53925 ESTABLISHED tcp4 0 0 *.22 *.*LISTEN tcp4 0 0 *.587 *.*LISTEN tcp4 0 0 *.25 *.*LISTEN tcp4 0 0 *.995 *.*LISTEN tcp4 0 0 *.110 *.*LISTEN tcp4 0 0 *.3306 *.*LISTEN udp4 0 0 127.0.0.1.123 *.* udp4 0 0 69.41.172.180.123 *.* udp4 0 0 69.41.172.174.123 *.* udp4 0 0 69.41.172.62.123 *.* udp4 0 0 69.41.172.249.123 *.* udp4 0 0 69.41.172.100.123 *.* udp4 0 0 69.41.171.69.123 *.* udp4 0 0 *.123 *.* udp4 0 0 *.514 *.* Thanks for your help Mark ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: (email) server connection problem : Help -- SOLVED
I want to thank everyone who helped me with this. It turned out that due to an administrative error, our hosting company had the ip addresses I was having trouble with routed to the wrong server. Everything is working now. Thanks again, Mark Moellering ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org