RE: Open BSD 3.9 unable to send email with attachment thru pf firewall.

2006-06-27 Thread Ajith Kumar



Hi

Ajith Kumar wrote:
 Hi
 I got your email address from Open BSD mailing lists.I hope you can help
me

Some more information would be helpfull.
Your OpenBSD setup, PF Configuration, E-Mail Client / Server, internet
connection.

Hi

It is a simple connection.
The client is contacting the sendmail server. The gateway machine is Open
BSD Firewall.
If I disable pf I am able to send mails with attachments.It looks like
problem with firewall itself.


SASKEN RATED Among THE Top 3 BEST COMPANIES TO WORK FOR IN INDIA - SURVEY 2005 
conducted by the BUSINESS TODAY - Mercer - TNS India

   SASKEN BUSINESS DISCLAIMER
This message may contain confidential, proprietary or legally Privileged 
information. In case you are not the original intended Recipient of the 
message, you must not, directly or indirectly, use, Disclose, distribute, 
print, or copy any part of this message and you are requested to delete it and 
inform the sender. Any views expressed in this message are those of the 
individual sender unless otherwise stated. Nothing contained in this message 
shall be construed as an offer or acceptance of any offer by Sasken 
Communication Technologies Limited (Sasken) unless sent with that express 
intent and with due authority of Sasken. Sasken has taken enough precautions to 
prevent the spread of viruses. However the company accepts no liability for any 
damage caused by any virus transmitted by this email


RE: Open BSD 3.9 unable to send email with attachment thru pffirewall.

2006-06-27 Thread Ajith Kumar




On Mon, 26 Jun 2006 19:14:54 +0530
Ajith Kumar [EMAIL PROTECTED] wrote:


Ajith, what exactly seems to be the problem?  PF does not do any
application layer filtering.  If you are having trouble sending an
email, you should verify with the recipient that the email server at
the remote end is not filtering email attachments.

There is no problem with mail server.If I disable pf by pfctl -d , 
I am able to send mails with attachments.



SASKEN RATED Among THE Top 3 BEST COMPANIES TO WORK FOR IN INDIA - SURVEY 2005 
conducted by the BUSINESS TODAY - Mercer - TNS India

   SASKEN BUSINESS DISCLAIMER
This message may contain confidential, proprietary or legally Privileged 
information. In case you are not the original intended Recipient of the 
message, you must not, directly or indirectly, use, Disclose, distribute, 
print, or copy any part of this message and you are requested to delete it and 
inform the sender. Any views expressed in this message are those of the 
individual sender unless otherwise stated. Nothing contained in this message 
shall be construed as an offer or acceptance of any offer by Sasken 
Communication Technologies Limited (Sasken) unless sent with that express 
intent and with due authority of Sasken. Sasken has taken enough precautions to 
prevent the spread of viruses. However the company accepts no liability for any 
damage caused by any virus transmitted by this email


RE: Open BSD 3.9 Pf issue with email with attachments.

2006-06-27 Thread Ajith Kumar



On 06/26/2006 09:17:33 AM, Ajith Kumar wrote:
 Ajith Kumar [EMAIL PROTECTED] writes:

  I am able to send and receive mails . But if there is any
 attachment
 which
  is bigger than 64 KB, i am not able to send.

 Peter N. M. Hansteen Writes :

 My first impulse is to look at what happens elsewhere, in no
 particular order, any content filtering or for that matter hard
 message size limits, network congestion on the way there causing
 timeouts etc.

 Ajith Kumar [EMAIL PROTECTED] writes:

 There is no problem in n/w congestion.If i disable pf by  pfctl -d 
 I am
 able to send mails
 with attachments. There is no problem in mail server also.

This has a feel to it of what happens when you have a pf.conf
file that keeps state but does not use flags S/SA, so
(if I understand correctly) the state tracking mechanisim
gets out of wack because it starts tracking in the middle
of a flow.
There was something about this on the pf list
in the last couple of months.

I had modified the entry like this

pass in quick log on fxp0 from any to  x.x.x.x  keep state flags S/SA  #1
pass out quick log on fxp1 from   any to x.x.x.x keep state flags S/SA  #2

pass in  quick log on fxp1  from x.x.x.x  to  any keep state flags S/SA #3
pass  out quick log on  fxp0 from  x.x.x.x  to any  keep state flags S/SA #4

( fxp0 is internal interface card. fxp1 is external interface card)

where x.x.x.x is ip address of mail server.Still I am not able to send mail
with big attachments.
I am able to send and receive other mails.

I subscribed to the mail list yesterday only :(

Regards,
Ajith




SASKEN RATED Among THE Top 3 BEST COMPANIES TO WORK FOR IN INDIA - SURVEY 2005 
conducted by the BUSINESS TODAY - Mercer - TNS India

   SASKEN BUSINESS DISCLAIMER
This message may contain confidential, proprietary or legally Privileged 
information. In case you are not the original intended Recipient of the 
message, you must not, directly or indirectly, use, Disclose, distribute, 
print, or copy any part of this message and you are requested to delete it and 
inform the sender. Any views expressed in this message are those of the 
individual sender unless otherwise stated. Nothing contained in this message 
shall be construed as an offer or acceptance of any offer by Sasken 
Communication Technologies Limited (Sasken) unless sent with that express 
intent and with due authority of Sasken. Sasken has taken enough precautions to 
prevent the spread of viruses. However the company accepts no liability for any 
damage caused by any virus transmitted by this email


Open BSD 3.9 unable to send email with attachment thru pf firewall.

2006-06-26 Thread Ajith Kumar
Hi
I got your email address from Open BSD mailing lists.I hope you can help me