Re: blue smtp access
"Joe Acquisto-j4" <[email protected]>
| Newsgroups | gmane.comp.security.ipcop.user |
|---|---|
| Message-ID | <56FFABF30200008500067AC4@mail> |
>>> On 4/2/2016 at 11:03 AM, in message <[email protected]>, <[email protected]> wrote: > On 02/04/16 14:20, Joe Acquisto-j4 wrote: >>> I will try to setup a way to show screen shots, but for now here is a >>> >snippet of the log while attempting to telnet on >>> >port 25 to the target: >>> > >>> >08:57:37 BLUE REJECT wlan-1 TCP 192.168.11.xxx 60332 aa:bb.cc:dd:ee:ff >>> >192.168.0.210 25(SMTP) >>> > >>> >I can setup IPCOP access to it's address on GREEN from that same BLUE device >>> >(and IP). Works well. >>> > >>> > >> Oops. I guess this can't be taken down. But I can always change the IP. > > So you are trying to access smtp on green from blue. I am not sure what > or why you have set up a service but you need to create an 'Internal > Traffic' rule from either any device or the specific device to port 25 > on a green server. > > Don't worry about the IP address they are all internal. > > You should have some thing useful in 'iptables -L FW_PINHOLES' > > -- (Re: internal just healthy paranoia . . . my oxymoron for the day) This is the interesting part, I think: LOG tcp -- 192.168.11.0/24 192.168.0.0/24 tcp dpt:smtp limit: avg 10/min burst 5 LOG level warning prefix "BLUE ACCEPT " ACCEPT tcp -- 192.168.11.0/24 192.168.0.0/24 tcp dpt:smtp LOG all -- 192.168.0.0/24 192.168.11.0/24 limit: avg 10/min burst 5 LOG level warning prefix "GREEN ACCEPT " ACCEPT all -- 192.168.0.0/24 192.168.11.0/24 LOG tcp -- android-x 192.168.0.210 tcp dpt:smtp limit: avg 10/min burst 5 LOG level warning prefix "BLUE ACCEPT " ACCEPT tcp -- android-x 192.168.0.210 tcp dpt:smtp GREEN to BLUE seems to work fine and certain BLUE to Green also work. I'm confuzzled. That's a specific reference to this issue, but not an invalid generalization either . . . ------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140 _______________________________________________ IPCop-user mailing list [email protected] Manage your subscription or unsubscribe https://lists.sourceforge.net/lists/listinfo/ipcop-user