Re: blue smtp access

Hi Joe,

do you have 'Address Filter' option enabled in IPCop Firewall->Firewall
Settings? In this case you have to enter the device MAC address in
Firewall->Address Filter config page.


Achim



-----Ursprüngliche Nachricht-----
Von: "Joe Acquisto-j4" <[email protected]>
Datum: Sat, 02 Apr 2016 11:24:35 -0400
An: <[email protected]>,<[email protected]>
Betreff: Re: [IPCop-user] blue smtp access

> >>> On 4/2/2016 at 11:03 AM, in message <[email protected]>,
> <[email protected]> wrote:
> > On 02/04/16 14:20, Joe Acquisto-j4 wrote:
> >>> I will try to setup a way to show screen shots, but for now here is a
> >>> >snippet of the log while attempting to telnet on
> >>> >port 25 to the target:
> >>> >
> >>> >08:57:37 BLUE REJECT wlan-1 TCP 192.168.11.xxx  60332 aa:bb.cc:dd:ee:ff
> >>> >192.168.0.210 25(SMTP)
> >>> >
> >>> >I can setup IPCOP access to it's address on GREEN from that same BLUE
> >>> >device (and IP).  Works well.
> >>> >
> >>> >
> >> Oops.  I guess this can't be taken down.  But I can always change the IP.
> > 
> > So you are trying to access smtp on green from blue. I am not sure what 
> > or why you have set up a service but you need to create an 'Internal 
> > Traffic' rule from either any device or the specific device to port 25 
> > on a green server.
> > 
> > Don't worry about the IP address they are all internal.
> > 
> > You should have some thing useful in 'iptables -L FW_PINHOLES'
> > 
> > -- 
> 
> (Re: internal just healthy paranoia . . . my oxymoron for the day)
> 
> This is the interesting part, I think:
> 
> LOG        tcp  --  192.168.11.0/24      192.168.0.0/24       tcp dpt:smtp
> limit: avg 10/min burst 5 LOG level warning prefix "BLUE ACCEPT " ACCEPT
> tcp  --  192.168.11.0/24      192.168.0.0/24       tcp dpt:smtp LOG
> all  --  192.168.0.0/24       192.168.11.0/24      limit: avg 10/min burst 5
> LOG level warning prefix "GREEN ACCEPT " ACCEPT     all  --
> 192.168.0.0/24       192.168.11.0/24 LOG        tcp  --  android-x
> 192.168.0.210        tcp dpt:smtp limit: avg 10/min burst 5 LOG level warning
> prefix "BLUE ACCEPT " ACCEPT     tcp  --  android-x  192.168.0.210        tcp
> dpt:smtp
> 
> GREEN to BLUE seems to work fine and certain BLUE to Green also work.
> 
> I'm confuzzled.  That's a specific reference to this issue, but not an
> invalid generalization either . . . 
> 
> 
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user





------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user