Re: [Security Firewall] MNF1 + Qmail POP

Thanks for the promptly reply.

The Qmail-pop3 is not on DMZ, Yes I am using NAT on my LAN. The Qmail
is sitting behind the fw therefore i have to DNAT the necessary port
to the qmail server.

Rules from /etc/shorewall/rules

Inbound For Qmail Services
ACCEPT  wan     fw      tcp     http    -
DNAT    wan     lan:192.168.3.89        tcp     http    -

ACCEPT  wan     fw      tcp     https   -
DNAT    wan     lan:192.168.3.89        tcp     https   -
ACCEPT  wan     fw      tcp     smtp    -

DNAT    wan     lan:192.168.3.89        tcp     smtp    -
ACCEPT:info     wan     fw      tcp     pop3    -

DNAT:info       wan     lan:192.168.3.89        tcp     pop3    -

ACCEPT  wan     lan     tcp     imap    -
DNAT    wan     lan:192.168.3.89        tcp     imap    -

ACCEPT  wan     fw      tcp     783     -
DNAT    wan     lan:192.168.3.89        tcp     783     -

ACCEPT  wan     fw      tcp     993     -
DNAT    wan     lan:192.168.3.89        tcp     993     -

--------------
ACCEPT  lan     wan     tcp     993     -
DNAT    wan     lan:192.168.3.89        tcp     ssh     -

-- 
> Where is the pop3 server? DMZ, WAN or inside FW?
> Are you using NAT in LAN?

> Please, post all your rules here (/etc/shorewall/rules)

> Steven Lim escreveu:

>>Hi can anyone shed me some light regarding the problem below... I am
>>setting up an e-mail server behind MNF fw...
>>
>>1. cannot connect to pop to receiveing mail using outlook...
>>
>>my outlook or other mail client just show the error "could not connect to server"
>>
>>and my fw log shows this after i am trying to connect to pop
>>---------------
>>Aug 22 09:09:36 firebox snort[4254]: [1:486:2] ICMP Destination Unreachable (Com
>>munication with Destination Host is Administratively Prohibited) [Classification
>>: Misc activity] [Priority: 3]: {ICMP} aaa.aaa.aaa.aaa -> bbb.bbb.bbb.bbb
>>Aug 22 09:09:37 firebox snort[4254]: [1:486:2] ICMP Destination Unreachable (Com
>>munication with Destination Host is Administratively Prohibited) [Classification
>>: Misc activity] [Priority: 3]: {ICMP} aaa.aaa.aaa.aaa -> bbb.bbb.bbb.bbb
>>---------------
>>aaa - fw ip
>>bbb - client pc ip
>>
>>
>>  
>>
>>------------------------------------------------------------------------
>>
>>____________________________________________________
>>Want to buy your Pack or Services from Mandriva? 
>>Go to http://store.mandriva.com
>>Join the Club : http://www.mandrivaclub.com
>>____________________________________________________
>>  
>>

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________