Re: Port 25 Delay

[Jon Fullmer <jon@jonfullmer.com>]

What specifically are you using as a firewall?  A Cisco router? A PIX
firewall? A Foundry layer 3 switch?

 - Jon

on 7/16/03 6:55 PM, Matt Hemingway at matt.hemingway@pcnalert.com wrote:

> Okay.  I'm gonna try to keep this short.  I'm not gonna go into too much
> detail...yet.
> 
> Problem: It takes 5 minutes for any machine (any OS) on one subnet, which
> we'll call Subnet1, to connect to mail.server.com:25.  From the same subnet,
> Subnet1, and again, from any machine, connecting to a website that is hosted
> on mail.server.com:80 it works fine.
> 
> We have another subnet, which we'll call Subnet2, where connecting to
> mail.server.com:25 works fine.  The difference between the 2 subnets is a
> firewall, which is also the gateway for both subnets.  The rules governing the
> 2 subnets are basically the same, except that Subnet2 has tighter
> restrictions.  Connected to the firewall is a router, which traffic coming
> from both subnets, going and coming from the internet must travel.
> 
> What I do know is:
> 
> It's not a routing problem.
> It's not ident or port 113.
> It's not OS specific.
> We're not being blocked.
> user@mail.server.com can e-mail us with no problems.
> 
> I've run ethereal on a machine in Subnet1 and a machine in Subnet2. The
> packets going to and from both machines to mail.server.com are (almost)
> identical.
> 
> We've rebooted the firewall and router....still no luck.
> 
> Any and all suggestions would be greatly appreciated.  If you want some more
> info, lemme know.
> 
> Thanks and godspeed!
> 
> -Matt
> 
> p.s. the winner gets a hug and possibly, if I get drunk enough, a kiss.