* Re: 30s delay while receiving mail
[not found] <BAY108-F26F9A9A119223E58D8E647978D0@phx.gbl>
@ 2005-09-29 10:43 ` Jörg Harmuth
2005-09-29 15:54 ` Jörg Harmuth
1 sibling, 0 replies; 2+ messages in thread
From: Jörg Harmuth @ 2005-09-29 10:43 UTC (permalink / raw)
To: netfilter
david v wrote:
> Hello,
> I'm having problems receiving email. There is always a delay of 30s
> behinf the DMZ zone.
[SNIP]
> telnet mail 110 (30s delay)
> telnet mail 25 (no delay)
>
> Forewall Nat rules are properly configured so that the firewall forward
> pop incoming queries to the correct IP adress(mail machine).
>
> I'm not sure how to resolve that issue, any help would be extremely
> useful. Could that be a problem on the firewall side ?
Yes and no - a matter of taste. May be there is a identd call from your
POP3 server ? And this call is DROPed somewhere ? If so, this rule will
help:
iptables -I OUTPUT -p tcp --dport 113 -j REJECT \
--reject-with tcp-reset
Hmm, your talking about DMZ. The above rule is written for the POP3
server itself. On the firewall you should replace OUTPUT with INPUT. If
these rules don't solve the problem you can delete the rule by
iptables -D [IN|OUT]PUT 1
HTH,
Joerg
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: 30s delay while receiving mail
[not found] <BAY108-F26F9A9A119223E58D8E647978D0@phx.gbl>
2005-09-29 10:43 ` 30s delay while receiving mail Jörg Harmuth
@ 2005-09-29 15:54 ` Jörg Harmuth
1 sibling, 0 replies; 2+ messages in thread
From: Jörg Harmuth @ 2005-09-29 15:54 UTC (permalink / raw)
To: netfilter
Arrrrrgh - sorry for the spam - wrong list :(
david v wrote:
> Hello,
> I'm having problems receiving email. There is always a delay of 30s
> behinf the DMZ zone.
[SNIP]
> telnet mail 110 (30s delay)
> telnet mail 25 (no delay)
>
> Forewall Nat rules are properly configured so that the firewall forward
> pop incoming queries to the correct IP adress(mail machine).
>
> I'm not sure how to resolve that issue, any help would be extremely
> useful. Could that be a problem on the firewall side ?
Yes and no - a matter of taste. May be there is a identd call from your
POP3 server ? And this call is DROPed somewhere ? If so, this rule will
help:
iptables -I OUTPUT -p tcp --dport 113 -j REJECT \
--reject-with tcp-reset
Hmm, your talking about DMZ. The above rule is written for the POP3
server itself. On the firewall you should replace OUTPUT with INPUT. If
these rules don't solve the problem you can delete the rule by
iptables -D [IN|OUT]PUT 1
HTH,
Joerg
!DSPAM:433bc6f472101927516234!
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-09-29 15:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <BAY108-F26F9A9A119223E58D8E647978D0@phx.gbl>
2005-09-29 10:43 ` 30s delay while receiving mail Jörg Harmuth
2005-09-29 15:54 ` Jörg Harmuth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox