From: varun_saa@vsnl.net
To: netfilter@lists.netfilter.org
Subject: mails not going thru'
Date: Sat, 07 May 2005 10:14:49 +0500 [thread overview]
Message-ID: <ebbf7aebfd86.ebfd86ebbf7a@vsnl.net> (raw)
Hello,
My server is on Mandriva 10.1
eth0 is WAN with static IP connected to 512K DSL
eth1 is LAN - 192.168.0.0/24 and 192.168.21.0/24
My rules are as follows :
# Generated by iptables-save v1.2.9 on Fri Jan 7 20:56:35 2000
*nat
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Fri Jan 7 20:56:35 2000
# Generated by iptables-save v1.2.9 on Fri Jan 7 20:56:35 2000
*mangle
:PREROUTING ACCEPT [1024:195745]
:INPUT ACCEPT [1019:194076]
:FORWARD ACCEPT [2:144]
:OUTPUT ACCEPT [1000:192114]
:POSTROUTING ACCEPT [999:192086]
COMMIT
# Completed on Fri Jan 7 20:56:35 2000
# Generated by iptables-save v1.2.9 on Fri Jan 7 20:56:35 2000
*filter
:FORWARD ACCEPT [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -p tcp -m tcp -i eth1 --dport 3128 --sport 1024:65535 -j ACCEPT
-A INPUT -p udp -m udp -i eth1 --dport 3128 --sport 1024:65535 -j ACCEPT
-A INPUT -s 62.0.0.0/255.0.0.0 -i eth0 -j REJECT
-A INPUT -p tcp -m tcp -s 217.81.0.0/255.255.0.0 -i eth0 -j REJECT
-A INPUT -i eth0 -j DROP
-A INPUT -p tcp -m tcp -i eth1 --sport 80 -j DROP
-A INPUT -m state -i eth1 --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p tcp -i eth1 -o eth0 --dport 25 --sport 1024: -j ACCEPT --syn
-A FORWARD -p tcp -i eth1 -o eth0 --dport 110 --sport 1024: -j ACCEPT --syn
-A FORWARD -p tcp -i eth1 -o eth0 --dport 1863 --sport 1024: -j ACCEPT --syn
-A FORWARD -p tcp -i eth1 -o eth0 --dport 5050 --sport 1024: -j ACCEPT --syn
-A OUTPUT -p udp --dport 53 --sport 1024: -j ACCEPT
COMMIT
# Completed on Fri Jan 7 20:56:35 2000
Now one problem got solved after chaging
but another has started because of that.
-A INPUT -p tcp -m tcp -i eth1 --dport 3128 --sport 1024:65535 -j ACCEPT
-A INPUT -p udp -m udp -i eth1 --dport 3128 --sport 1024:65535 -j ACCEPT
Originally sport was set to : --sport 80
I changed to : --sport 1024:65535
after corrections from Jason.
Now I think my mail are not going through
which I think is because " 1024 ".
Please correct me if I am wrong.
The squid part makes me happy but not the
mail part.
What corrections need to be made.
Thanks in advance
Varun
next reply other threads:[~2005-05-07 5:14 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-05-07 5:14 varun_saa [this message]
2005-05-07 6:15 ` mails not going thru' Taylor, Grant
2005-05-07 14:47 ` Jason Opperisano
-- strict thread matches above, loose matches on Subject: below --
2005-05-07 7:12 varun_saa
2005-05-07 7:21 ` Taylor, Grant
2005-05-07 9:09 varun_saa
2005-05-09 6:07 ` Taylor, Grant
2005-05-07 16:03 varun_saa
2005-05-09 3:53 varun_saa
2005-05-09 14:34 ` Jason Opperisano
2005-05-09 6:01 varun_saa
2005-05-09 6:13 varun_saa
2005-05-09 6:19 ` Taylor, Grant
2005-05-12 11:50 varun_saa
2005-05-12 12:38 ` Jason Opperisano
2005-05-12 13:47 ` Jason Opperisano
2005-05-12 15:05 varun_saa
2005-05-12 15:06 varun_saa
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ebbf7aebfd86.ebfd86ebbf7a@vsnl.net \
--to=varun_saa@vsnl.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.