[opensuse] Help With Mail Server

older
[opensuse] recording problems with...

Andreas van dem Helge

16 Apr 2008 16 Apr '08

16:15

I want to setup the mail server so when you send an email to <localusername>@<domain with MX record set to this machine> it gets delivered (instead of bouncing) and I've done the following setup: In YaST2 -> Network Services -> Mail Transfer Agent I used the following options: *Standard Configuration Type *Permanent Connection *Virus scan: unticked (disabled) *Outgoing Mail Server: (blank) *Accept remote SMTP connections: ticked (enabled) *Firewall is disabled But I can't even telnet to port 25 on this machine: root@srv04 [~]# telnet app5.SuSELinuxRocks 25 Trying 74.420.420.420.. telnet: connect to address 74.420.420.420 Connection refused telnet: Unable to connect to remote host: Connection refused I can telnet into localhost: app5:~ # telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 app5.SuSELinuxRocks ESMTP Postfix I even tried to edit /etc/postfix/main.cf the line inet_interfaces=all was commented out so I uncommented it and issued the command 'service postfix restart' and still I cannot telnet into port 25 (or receive actual email that an MTA tries to deliver to the server) So the question is how exactly am I supposed to enable the MTA on the external interface. FWIW I haven't had an issue getting local mails (cron reports and such.) I'll admit I'm not an expert on MTA's. All my life I've gone the easy route (Xmail sever, cPanel, Scalix, etc) and always been afraid of getting "down and dirty" with the configfiles and such. The most I've down is edit config files when using "how-to" guides on how to add virus protection and such or doing what cPanel support says needs to be done to fix the issue (usually running one of their scripts). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Show replies by date

John Andersen

16 Apr 16 Apr

16:59

On Wed, Apr 16, 2008 at 9:15 AM, Andreas van dem Helge wrote:

...

I want to setup the mail server so when you send an email to <localusername>@<domain with MX record set to this machine> it gets delivered (instead of bouncing) and I've done the following setup:

In YaST2 -> Network Services -> Mail Transfer Agent I used the following options:

*Standard Configuration Type *Permanent Connection *Virus scan: unticked (disabled) *Outgoing Mail Server: (blank) *Accept remote SMTP connections: ticked (enabled) *Firewall is disabled

But I can't even telnet to port 25 on this machine:

root@srv04 [~]# telnet app5.SuSELinuxRocks 25 Trying 74.420.420.420.. telnet: connect to address 74.420.420.420 Connection refused

Whats up with the second, third, and fourth octet? 420? I don't think so....!!! -- ----------JSA--------- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Sandy Drobic

17:25

Andreas van dem Helge wrote:

...

I want to setup the mail server so when you send an email to <localusername>@<domain with MX record set to this machine> it gets delivered (instead of bouncing) and I've done the following setup:

In YaST2 -> Network Services -> Mail Transfer Agent I used the following options:

*Standard Configuration Type *Permanent Connection *Virus scan: unticked (disabled) *Outgoing Mail Server: (blank) *Accept remote SMTP connections: ticked (enabled) *Firewall is disabled

But I can't even telnet to port 25 on this machine:

root@srv04 [~]# telnet app5.SuSELinuxRocks 25 Trying 74.420.420.420.. telnet: connect to address 74.420.420.420 Connection refused telnet: Unable to connect to remote host: Connection refused

Did you try to obfuscate the ip address or do you really have this ip address configured?!?

...

I can telnet into localhost:

app5:~ # telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 app5.SuSELinuxRocks ESMTP Postfix

I even tried to edit /etc/postfix/main.cf the line inet_interfaces=all was commented out so I uncommented it and issued the command 'service postfix restart' and still I cannot telnet into port 25 (or receive actual email that an MTA tries to deliver to the server)

Show output of postconf inet_interfaces netstat -antp | grep :25 | grep -i listen Also: rcpostfix stop rcpostfix start Then show the last 20 lines in /var/log/mail and /var/log/messages -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Andreas van dem Helge

17 Apr 17 Apr

00:08

On Wed, Apr 16, 2008 at 1:25 PM, Sandy Drobic wrote:

...

Did you try to obfuscate the ip address or do you really have this ip address configured?!?

Yes, of course I would not try to use an invalid IP address.

...

postconf inet_interfaces

app5:/srv/www/htdocs/vahalla # postconf inet_interfaces inet_interfaces = localhost

...

netstat -antp | grep :25 | grep -i listen

...

Also:

rcpostfix stop rcpostfix start

Then show the last 20 lines in /var/log/mail and /var/log/messages #/var/log/mail

Confirms its only listening on localhost pr 16 12:13:14 app5 postfix/smtpd[30375]: disconnect from localhost[127.0.0.1] Apr 16 12:14:02 app5 postfix/master[30285]: terminating on signal 15 Apr 16 12:14:02 app5 postfix/postfix-script[30528]: starting the Postfix mail system Apr 16 12:14:02 app5 postfix/master[30532]: daemon started -- version 2.4.5, configuration /etc/postfix Apr 16 12:14:29 app5 postfix/master[30532]: terminating on signal 15 Apr 16 12:14:30 app5 postfix/postfix-script[30657]: starting the Postfix mail system Apr 16 12:14:30 app5 postfix/master[30661]: daemon started -- version 2.4.5, configuration /etc/postfix Apr 16 20:00:37 app5 postfix/master[30661]: terminating on signal 15 Apr 16 20:00:45 app5 postfix/postfix-script[3789]: starting the Postfix mail system Apr 16 20:00:45 app5 postfix/master[3793]: daemon started -- version 2.4.5, configuration /etc/postfix #/var/log/messages app5:/srv/www/htdocs/vahalla # tail /var/log/messages Apr 16 19:31:55 app5 smartd[3710]: Device: /dev/sdb, SMART Usage Attribute: 190 Temperature_Celsius changed from 74 to 76 Apr 16 19:31:55 app5 smartd[3710]: Device: /dev/sdb, SMART Usage Attribute: 194 Temperature_Celsius changed from 121 to 123 Apr 16 19:32:17 app5 pure-ftpd: (?@10.53.117.210) [INFO] New connection from 10.53.117.210 Apr 16 19:32:17 app5 pure-ftpd: (?@10.53.117.210) [WARNING] Authentication failed for user [hbrockford] Apr 16 19:32:21 app5 pure-ftpd: (?@10.53.117.210) [INFO] Logout. Apr 16 20:00:01 app5 /usr/sbin/cron[3665]: (wwwstats) CMD (/var/lib/awstats/awstats.bin -config=administration.partition3.wide -update > /dev/null #AWStats admin3) Apr 16 20:00:01 app5 /usr/sbin/cron[3666]: (wwwstats) CMD (/var/lib/awstats/awstats.bin -config=genesis.teller.wide -update > /dev/null #AWStats osfubc) Apr 16 20:00:01 app5 /usr/sbin/cron[3667]: (wwwstats) CMD (/etc/webmin/bandwidth/rotate.pl) Apr 16 20:00:01 app5 /usr/sbin/cron[3668]: (wwwstats) CMD (/var/lib/awstats/awstats.bin -config=bounce.partition3.wide -update

...

/dev/null #AWStats bounce3) Apr 16 20:01:02 app5 syslog-ng[2232]: STATS: dropped 0

...

-- Sandy

List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Sandy Drobic

05:56

Andreas van dem Helge wrote:

...

On Wed, Apr 16, 2008 at 1:25 PM, Sandy Drobic wrote:

...
Did you try to obfuscate the ip address or do you really have this ip address configured?!?

Yes, of course I would not try to use an invalid IP address.

Then why not use a private ip address instead of an invalid one.

...

...
postconf inet_interfaces

app5:/srv/www/htdocs/vahalla # postconf inet_interfaces inet_interfaces = localhost

In that case yast borked and didn't change it to all: postconf -e "inet_interfaces = all" rcpostfix stop rcpostfix start Then try again. -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Andreas van dem Helge

11:51

On Thu, Apr 17, 2008 at 1:56 AM, Sandy Drobic wrote:

...

Then why not use a private ip address instead of an invalid one.

I am using a valid public IP address. I'd just rather not post it publicly.

...

In that case yast borked and didn't change it to all:

postconf -e "inet_interfaces = all" rcpostfix stop rcpostfix start

Even though postconf reports "postconf: warning: /etc/postfix/main.cf: multiple entries for "inet_interfaces"" (Because I manually uncommented it and restarted the service afterwards), that actually fixed it. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Sandy Drobic

12:06

Andreas van dem Helge wrote:

...

On Thu, Apr 17, 2008 at 1:56 AM, Sandy Drobic wrote:

...
Then why not use a private ip address instead of an invalid one.

I am using a valid public IP address. I'd just rather not post it publicly.

That's not necessary, but a private ip address would prevent some of the irritation that are cause by such misleading obfuscation. Especially since the problem had to do with connection to an ip.

...

...
In that case yast borked and didn't change it to all:

postconf -e "inet_interfaces = all" rcpostfix stop rcpostfix start

Even though postconf reports "postconf: warning: /etc/postfix/main.cf: multiple entries for "inet_interfaces"" (Because I manually uncommented it and restarted the service afterwards), that actually fixed it.

Okay, just make sure that you - only accept valid recipients - your config only allows trusted users/clients to relay - set up basic spam prevention measures. -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Andreas van dem Helge

16:26

On Thu, Apr 17, 2008 at 8:06 AM, Sandy Drobic wrote:

...

Andreas van dem Helge wrote:

...
On Thu, Apr 17, 2008 at 1:56 AM, Sandy Drobic wrote:

...
Then why not use a private ip address instead of an invalid one.

I am using a valid public IP address. I'd just rather not post it publicly.

That's not necessary, but a private ip address would prevent some of the irritation that are cause by such misleading obfuscation. Especially since the problem had to do with connection to an ip.

Ok I get what you're saying now... obsfucate with private IP... Makes sense. I guess I can't think right at 2AM

...

...
...
In that case yast borked and didn't change it to all:

postconf -e "inet_interfaces = all" rcpostfix stop rcpostfix start

Even though postconf reports "postconf: warning: /etc/postfix/main.cf: multiple entries for "inet_interfaces"" (Because I manually uncommented it and restarted the service afterwards), that actually fixed it.

Okay, just make sure that you - only accept valid recipients - your config only allows trusted users/clients to relay - set up basic spam prevention measures.

Yes I will do open relay checks and the like very soon. I'm that last person that wants to be able to harbour hackers & spammers. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

5857

Age (days ago)

5858

Last active (days ago)

List overview

Download

7 comments

3 participants

participants (3)

Andreas van dem Helge
John Andersen
Sandy Drobic