[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: ipf rejecting but why?
From:       Darren Reed <darrenr () reed ! wattle ! id ! au>
Date:       2007-05-19 21:47:39
Message-ID: 464F707B.1050903 () reed ! wattle ! id ! au
[Download RAW message or body]

JD Bronson wrote:
> ...
> Here are some of the actual non-parsed log rejections:
>
> May 18 18:20:42 lexi ipmon[124]: 18:20:41.942290 sppp0 @0:59 b
> 69.147.64.124,43761 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:20:49 lexi ipmon[124]: 18:20:49.831577 sppp0 @0:59 b
> 69.147.64.124,43761 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:21:06 lexi ipmon[124]: 18:21:05.600252 sppp0 @0:59 b
> 69.147.64.124,43761 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:21:37 lexi ipmon[124]: 18:21:37.126844 sppp0 @0:59 b
> 69.147.64.124,43761 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:23:43 lexi ipmon[124]: 18:23:42.984772 sppp0 @0:59 b
> 69.147.64.169,26735 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:23:51 lexi ipmon[124]: 18:23:50.853821 sppp0 @0:59 b
> 69.147.64.169,26735 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:24:06 lexi ipmon[124]: 18:24:06.591992 sppp0 @0:59 b
> 69.147.64.169,26735 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
> May 18 18:24:38 lexi ipmon[124]: 18:24:38.068355 sppp0 @0:59 b
> 69.147.64.169,26735 -> 192.168.82.170,25 PR tcp len 20 52 -A IN NAT
>
> ...
> Does this give anyone an idea as to why email is (at times) being
> rejected?

Are you able to capture a session that doesn't work with tcpdump?
tcpdump -w bad-smtp -s 1536 port 25

And what settings change/dont change in output from "ipfstat -s", "ipnat
-s",
"ipfstat -f" and "ipfstat" that might indicate a problem?

Darren

[prev in list] [next in list] [prev in thread] [next in thread]