Mail Through Firewall

Mail Through Firewall

[Peter Marshall]

Hey, I am sure this question is going to seem trivial to everyone here ..
but I will ask anyway.
I want to get outlook to work on my inside box .... I have it all set up
correctly, but it can't find the pop / smtp servers ...

I ran ethereal to see what the problem was ...
When I try to connect I get 3 requests
source 10.0.0.2
dest 10.0.0.255
Protocol NBNS
source and dest ports: 137

and I get no reply's ... ( well, I get an arp request after the 3rd try ...)
Any ideas how to get this working ?

BTW, I am using IPTables

Thanks
Peter Marshall

Re: Mail Through Firewall

[Antony Stone]

On Wednesday 18 February 2004 1:57 pm, Peter Marshall wrote:

> Hey, I am sure this question is going to seem trivial to everyone here ..
> but I will ask anyway.
> I want to get outlook to work on my inside box .... I have it all set up
> correctly, but it can't find the pop / smtp servers ...
>
> I ran ethereal to see what the problem was ...
> When I try to connect I get 3 requests
> source 10.0.0.2
> dest 10.0.0.255

That's a broadcast address...

> Protocol NBNS

Ugh.   M$ Outlook trying to use NetBios Name Resolution instead of DNS :(

> source and dest ports: 137

NetBios....

> and I get no reply's ... ( well, I get an arp request after the 3rd try
> ...) Any ideas how to get this working ?

Tell the client machine (or Outlook, if this is one of those things which 
Outlook tries to look after by itself, never mind how the rest of the machine 
has been configured), to resolve names by DNS, not by using NetBios.

Then it might sensibly look up the IP address of your POP3 server and send a 
TCP packet to port 110 on it....

Regards,

Antony.

-- 
"Note: Windows 98, Windows 98SE and Windows 95 are not affected by [MS
Blaster].   However, these products are no longer supported.   Users of these
products are strongly encouraged to upgrade to later versions."

(which *are* affected by MS Blaster...)

http://www.microsoft.com/security/security_bulletins/ms03-026.asp

                                                     Please reply to the list;
                                                           please don't CC me.

Re: Mail Through Firewall

[Ray Leach]

[-- Attachment #1: Type: text/plain, Size: 1153 bytes --]

On Wed, 2004-02-18 at 15:57, Peter Marshall wrote:
> Hey, I am sure this question is going to seem trivial to everyone here ..
> but I will ask anyway.
> I want to get outlook to work on my inside box .... I have it all set up
> correctly, but it can't find the pop / smtp servers ...
> 
> I ran ethereal to see what the problem was ...
> When I try to connect I get 3 requests
> source 10.0.0.2
> dest 10.0.0.255
> Protocol NBNS
> source and dest ports: 137
> 
Definitely not smtp or pop3 traffic. pop3 is port 110 and smtp is port
25.

Port 137 is NBNS (NetBIOS name service). Your outlook client is
broadcasting (10.0.0.255) on the local LAN, probably looking for a
domain controller.

> and I get no reply's ... ( well, I get an arp request after the 3rd try ...)
> Any ideas how to get this working ?
> 
> BTW, I am using IPTables
> 
> Thanks
> Peter Marshall
-- 
--
Raymond Leach <raymondl@knowledgefactory.co.za>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD  00EE 8757 EE47 F06F FB28
--

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: Mail Through Firewall

[Peter Marshall]

How do I tell outlook to look up using DNS instead of NetBIOS ... ?

----- Original Message ----- 
From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
To: <netfilter@lists.netfilter.org>
Sent: Wednesday, February 18, 2004 10:05 AM
Subject: Re: Mail Through Firewall


> On Wednesday 18 February 2004 1:57 pm, Peter Marshall wrote:
>
> > Hey, I am sure this question is going to seem trivial to everyone here
..
> > but I will ask anyway.
> > I want to get outlook to work on my inside box .... I have it all set up
> > correctly, but it can't find the pop / smtp servers ...
> >
> > I ran ethereal to see what the problem was ...
> > When I try to connect I get 3 requests
> > source 10.0.0.2
> > dest 10.0.0.255
>
> That's a broadcast address...
>
> > Protocol NBNS
>
> Ugh.   M$ Outlook trying to use NetBios Name Resolution instead of DNS :(
>
> > source and dest ports: 137
>
> NetBios....
>
> > and I get no reply's ... ( well, I get an arp request after the 3rd try
> > ...) Any ideas how to get this working ?
>
> Tell the client machine (or Outlook, if this is one of those things which
> Outlook tries to look after by itself, never mind how the rest of the
machine
> has been configured), to resolve names by DNS, not by using NetBios.
>
> Then it might sensibly look up the IP address of your POP3 server and send
a
> TCP packet to port 110 on it....
>
> Regards,
>
> Antony.
>
> -- 
> "Note: Windows 98, Windows 98SE and Windows 95 are not affected by [MS
> Blaster].   However, these products are no longer supported.   Users of
these
> products are strongly encouraged to upgrade to later versions."
>
> (which *are* affected by MS Blaster...)
>
> http://www.microsoft.com/security/security_bulletins/ms03-026.asp
>
>                                                      Please reply to the
list;
>                                                            please don't CC
me.
>
>

Re: Mail Through Firewall

[Alexis]

what is the netmask of your network? it sounds like the dest address is
a broadcast address


On Wed, 2004-02-18 at 10:57, Peter Marshall wrote:
> Hey, I am sure this question is going to seem trivial to everyone here ..
> but I will ask anyway.
> I want to get outlook to work on my inside box .... I have it all set up
> correctly, but it can't find the pop / smtp servers ...
> 
> I ran ethereal to see what the problem was ...
> When I try to connect I get 3 requests
> source 10.0.0.2
> dest 10.0.0.255
> Protocol NBNS
> source and dest ports: 137
> 
> and I get no reply's ... ( well, I get an arp request after the 3rd try ...)
> Any ideas how to get this working ?
> 
> BTW, I am using IPTables
> 
> Thanks
> Peter Marshall
-- 
Alexis <alexis@attla.net.ar>

AW: Mail Through Firewall

[root]

 
Just try to enter your ISP's DNS-Servers in the Properties of TCP/IP
(control panel)
OR
if you are you running your own DNS-Servers just enter your own DNS-Servers

You can check your correct DNS-setup when you try to ping your mail-servers
on
The command-line - if you get any replies your setup must be working...

I'm currently running M$ Outlook 2003 and I also tried M$ Outlook Express 6
and
M$ Outlook 2000 - both with success

Greetings
Florian St.

> 
> How do I tell outlook to look up using DNS instead of NetBIOS ... ?
> 
> ----- Original Message -----
> From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
> To: <netfilter@lists.netfilter.org>
> Sent: Wednesday, February 18, 2004 10:05 AM
> Subject: Re: Mail Through Firewall
> 
> 
> > On Wednesday 18 February 2004 1:57 pm, Peter Marshall wrote:
> >
> > > Hey, I am sure this question is going to seem trivial to 
> everyone here
> ..
> > > but I will ask anyway.
> > > I want to get outlook to work on my inside box .... I 
> have it all set up
> > > correctly, but it can't find the pop / smtp servers ...
> > >
> > > I ran ethereal to see what the problem was ...
> > > When I try to connect I get 3 requests
> > > source 10.0.0.2
> > > dest 10.0.0.255
> >
> > That's a broadcast address...
> >
> > > Protocol NBNS
> >
> > Ugh.   M$ Outlook trying to use NetBios Name Resolution 
> instead of DNS :(
> >
> > > source and dest ports: 137
> >
> > NetBios....
> >
> > > and I get no reply's ... ( well, I get an arp request 
> after the 3rd try
> > > ...) Any ideas how to get this working ?
> >
> > Tell the client machine (or Outlook, if this is one of 
> those things which
> > Outlook tries to look after by itself, never mind how the 
> rest of the
> machine
> > has been configured), to resolve names by DNS, not by using NetBios.
> >
> > Then it might sensibly look up the IP address of your POP3 
> server and send
> a
> > TCP packet to port 110 on it....
> >
> > Regards,
> >
> > Antony.
> >
> > -- 
> > "Note: Windows 98, Windows 98SE and Windows 95 are not 
> affected by [MS
> > Blaster].   However, these products are no longer 
> supported.   Users of
> these
> > products are strongly encouraged to upgrade to later versions."
> >
> > (which *are* affected by MS Blaster...)
> >
> > http://www.microsoft.com/security/security_bulletins/ms03-026.asp
> >
> >                                                      Please 
> reply to the
> list;
> >                                                            
> please don't CC
> me.
> >
> >
> 
> 

Re[2]: Mail Through Firewall

[Alexis]

if you have configured a dns (1 or more) outlook will ask to windows
about the name resolution, OS then will try any possible method to
find the name, so if Windows cannot resolve the name via Netbios, it
will use dns, and then any other service if configured.



Hello Peter,

Wednesday, February 18, 2004, 12:07:05 PM, you wrote:

PM> How do I tell outlook to look up using DNS instead of NetBIOS ... ?

PM> ----- Original Message ----- 
PM> From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
PM> To: <netfilter@lists.netfilter.org>
PM> Sent: Wednesday, February 18, 2004 10:05 AM
PM> Subject: Re: Mail Through Firewall


>> On Wednesday 18 February 2004 1:57 pm, Peter Marshall wrote:
>>
>> > Hey, I am sure this question is going to seem trivial to everyone here
PM> ..
>> > but I will ask anyway.
>> > I want to get outlook to work on my inside box .... I have it all set up
>> > correctly, but it can't find the pop / smtp servers ...
>> >
>> > I ran ethereal to see what the problem was ...
>> > When I try to connect I get 3 requests
>> > source 10.0.0.2
>> > dest 10.0.0.255
>>
>> That's a broadcast address...
>>
>> > Protocol NBNS
>>
>> Ugh.   M$ Outlook trying to use NetBios Name Resolution instead of DNS :(
>>
>> > source and dest ports: 137
>>
>> NetBios....
>>
>> > and I get no reply's ... ( well, I get an arp request after the 3rd try
>> > ...) Any ideas how to get this working ?
>>
>> Tell the client machine (or Outlook, if this is one of those things which
>> Outlook tries to look after by itself, never mind how the rest of the
PM> machine
>> has been configured), to resolve names by DNS, not by using NetBios.
>>
>> Then it might sensibly look up the IP address of your POP3 server and send
PM> a
>> TCP packet to port 110 on it....
>>
>> Regards,
>>
>> Antony.
>>
>> -- 
>> "Note: Windows 98, Windows 98SE and Windows 95 are not affected by [MS
>> Blaster].   However, these products are no longer supported.   Users of
PM> these
>> products are strongly encouraged to upgrade to later versions."
>>
>> (which *are* affected by MS Blaster...)
>>
>> http://www.microsoft.com/security/security_bulletins/ms03-026.asp
>>
>>                                                      Please reply to the
PM> list;
>>                                                            please don't CC
PM> me.
>>
>>



-- 
Best regards,
 Alexis                            mailto:alexis@attla.net.ar