From: Peter Terpstra on

Dear readers,

A few days ago I upgraded to opensuse 11.3
Postfix worked fine but now it cannot receive anymore even when I close the
firewall on this box.

On localhost from the postfix box:

nmap -p1-1024 localhost

Starting Nmap 5.00 ( http://nmap.org ) at 2010-07-28 11:46 CEST
Warning: Hostname localhost resolves to 2 IPs. Using 127.0.0.1.
Interesting ports on localhost (127.0.0.1):
Not shown: 1019 closed ports
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
111/tcp open rpcbind
631/tcp open ipp
783/tcp open spamassassin

From a different host:
Interesting ports on sanga.localtwo (10.9.0.4):
Not shown: 1022 filtered ports
PORT STATE SERVICE
22/tcp open ssh
25/tcp closed smtp

This stays the same if I close the firewall on the other host.

~

The are no error messages in the postfix logs and there is nothing added in
the /etc/hosts.* files.

Anyone ideas?

Thanks in advantage.

Peter
From: Peter Terpstra on
houghi wrote:

> Look at the firewall on your router. (I asume disable the firewall.
> Closing a firewall means blocking everything). I have no idea what your
> infrastructure is.

There is no router between it, both hosts are local.

on the postfix box:

prompt>iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

> You sure that is the correct machine. Verify with `/sbin/ifconfig` on
> your postfix machine.

Yes I'm absolutely sure.

>> Anyone ideas?
>
> Check your postfix settings to be sure that it allows connections from
> the machines you want to access it from.
> Check if you can correctly access port 25 locally.

Locally there is no problem

> See that the firewall is turned off (The result should be that an nmap
> shows all the ports open as well.
> See that you can ssh to the machine and you arrive at the correct
> machine
> Close smtp and open ssh on port 25 and test if you can ssh to port 25.
> This so you can determine if it is a firewall or a mail issue.

No problem the port can be reached:

From other box to postfix box:

prompt>nmap -p 1-1024 sanga

Interesting ports on sanga.localtwo (10.9.0.4):
Not shown: 1022 filtered ports
PORT STATE SERVICE
22/tcp closed ssh
25/tcp open smtp

prompt>telnet sanga 25
Trying 10.9.0.4...
Connected to sanga.localtwo.
Escape character is '^]'.
SSH-2.0-OpenSSH_5.4

There is no problem with the connection its only a mail problem.


> Just ideas. Even if you have tried them, retry them after the ssh to the
> machine, especially running ssh on port 25.

Thanks for your answer.

Peter

From: Peter Terpstra on
Peter Terpstra wrote:

> Thanks for your answer.

version:
postfix-2.7.1-2.1.1.x86_64

Peter

From: David Bolt on
On Wednesday 28 Jul 2010 11:27, while playing with a tin of spray paint,
Peter Terpstra painted this mural:

>
> Dear readers,
>
> A few days ago I upgraded to opensuse 11.3
> Postfix worked fine but now it cannot receive anymore even when I close the
> firewall on this box.

<snip>

> The are no error messages in the postfix logs and there is nothing added in
> the /etc/hosts.* files.
>
> Anyone ideas?

Have you checked to make sure that Postfix is still listening for remote
connections? If it was before, I would still expect it to be doing so,
but double checking won't harm. Start YaST2, select System then
/etc/sysconfig Editor and look under Network -> Mail -> General for
SMTPD_LISTEN_REMOTE.

<quote>
Set this to "yes" if mails from remote should be accepted
this is necessary for any mail server.
If set to "no" or empty the only mails from localhost
are accepted.
</quote>


Regards,
David Bolt

--
Team Acorn: www.distributed.net
| | openSUSE 11.3RC2 32b |
openSUSE 11.1 64b | openSUSE 11.2 64b | |
openSUSE 11.1 PPC | TOS 4.02 | RISC OS 4.02 | RISC OS 3.11

From: Peter Terpstra on
David Bolt wrote:

> Have you checked to make sure that Postfix is still listening for remote
> connections? If it was before, I would still expect it to be doing so,
> but double checking won't harm. Start YaST2, select System then
> /etc/sysconfig Editor and look under Network -> Mail -> General for
> SMTPD_LISTEN_REMOTE.

Thanks for your answer.

root(a)sanga:/etc/sysconfig:0>grep SMTPD_LISTEN_REMOTE *
mail:SMTPD_LISTEN_REMOTE="yes"

Kind Regads,

Peter