proxsmtp service not showing as ON or OFF

[xsys2001]

Kare -

The script works fine (replaces the original file) but now when restarting the services this is what i get (see log below). There is not mention of 'PREROUTING' and using an online port scanning, the port 10025 becomes open/active. I've uninstall the modified file for the time being, which brings back the 'PREROUTING' line in the log and closes port 10025 in the Red IF. Any idea? i have backed-up Copfilter, uninstalled, re-installed, and restored and still does the same thing.

*******************************************************************************************************
Restarting proxmstpd..
sent a HUP signal to monit waiting 1 second(s) proxsmtpd killed
waiting 1 second(s)
removing firewall rules
proxsmtpd is not running
No firewall rules active, proxsmtp mail filtering not active
Iptables firewall rules active:
Configured with MAIL Server on network: GREEN
SMTP Traffic Scanning enabled on RED: eth1
starting proxsmtpd
waiting 1 second(s)
proxsmtpd is running with PID 7131
Iptables firewall rules active:
Table: filter Chain: INPUT 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10025
Table: nat Chain: OUTPUT 0 0 DNAT tcp -- * * xx.xxx.xxx.xxx xx.xxx.xxx.xxx tcp dpt:26 to:192.168.x.x:25
Table: nat Chain: POSTROUTING 0 0 SNAT tcp -- * * 192.168.x.x/24 192.168.x.x tcp dpt:26 to:192.168.x.x

[karesmakro]

Hi Sean H!

As I said in pm, at this moment I have no testmachine!
I'm sorry, I overlooked an iptable ruleset.
Please try again and report.
Normally this should do the job
http://www.it-connect-unix.de/copfilter/proxsmtp_portchange_II.tar.gz
md5sum: 965d83968d2d47d0f7197e5f9fd67eeb

and this is my output:

Code: Select all

SMTP Traffic Scanning enabled on GREEN: eth0
SMTP Traffic Scanning enabled on RED: eth1
starting proxsmtpd
waiting 1 second(s)

proxsmtpd is running with PID 1903
Iptables firewall rules active:
Table: nat    Chain: PREROUTING         0        0 REDIRECT   tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:587 redir ports 10025
Table: nat    Chain: PREROUTING         0        0 REDIRECT   tcp  --  eth1   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:587 redir ports 10025
Table: filter Chain: INPUT              0        0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10025
Table: nat    Chain: OUTPUT             0        0 DNAT       tcp  --  *      *       192.168.60.173       192.168.60.173      tcp dpt:26 to:192.168.60.100:26
Table: nat    Chain: POSTROUTING        0        0 SNAT       tcp  --  *      *       10.1.1.0/24          192.168.60.100      tcp dpt:26 to:10.1.1.20

where 10.1.1.20 is my internal network.

If this will not work, can you please post me a short overview about your network configuration?
This would be great!
(could you please use code tags for output, this is easier to read )

karesmakro

[xsys2001]

Kare - your file worked 100%. Thanks for all your help with this, and thanks for such a fine product!



Sean