AW: FIAIF blocks local postfix

[Anders Peter Fugmann]

Remember to set the GLOBAL flag on the interface for device eth0.

Regards
Anders Fugmann


Sebastian Feldmann wrote:
> Hi,
> 
> i read the page and can confirm that the network configurations
> IP, MASK, NET, and BCAST are identical to the ifconfig settings.
> 
> FIAIF => ifconfig
> DEV   == eth0
> IP    == inet address
> MASK  == mask
> NET   == inet address/mask
> BCAST == bcast
> 
> Everything else works just fine, i opend specific ports and closed them and got the expected results.
> 
> But i still cant deliver mails to our own mailserver.
> 
> regards
> Sebastian
> 
> 
> 
> -----Ursprüngliche Nachricht-----
> Von: fiaif-bounces at fiaif.net [mailto:fiaif-bounces at fiaif.net] Im Auftrag von Anders Peter Fugmann
> Gesendet: Mittwoch, 26. März 2008 14:53
> An: Sebastian Feldmann
> Cc: fiaif at fiaif.net
> Betreff: Re: FIAIF blocks local postfix
> 
> Please read the 'maintaining' section on the webpage.
> (http://www.fiaif.net/maintain.php)
> 
> In short, A packet is reported (and dropped) as a martian if it has an 
> illegal source or destination address compared to the interface it was 
> seen on. I would suspect that the network configuration of fiaif is 
> incorrect.
> 
> Try reading the man page
> Sebastian Feldmann wrote:
>> Hi there,
>>
>> first of all, i'm a networking n00b
>> i'm trying hard to improve my linux serveradmin/networking skills but there are still so much things i just dont know.
>>
>> We are running a little website on our server (www.moviegod.de).
>> Our serveradmin has quit a little while ago, so i have to do this things on my own
>>
>> On our website is a "standard" contact form.
>> The user submits the form, the webserver sends a mail via the mailserver postfix.
>>
>> This works just fine for any mail addresses but not for our own *@moviegod.de addresses.
>>
>> my FIAIF config for outgoing requests looks like:
>>
>> ==================IFAIF===================
>> OUTPUT[0]="ACCEPT ALL 0.0.0.0/0=>0.0.0.0/0"
>>
>> The Postfix mailq looks like this
>> The mails are scheduled but not delifered
>>
>> ==================POSTFIX===================
>> 5AB99D340A2  680 Wed Mar 26 12:57:44
>> www-data at 85-10-199-34.clients.your-server.de
>> (connect to mailserv.regfish.com[79.140.49.126]: Connection timed out)
>> info at moviegod.de
>>
>> The log shows the following
>> ==================LOG===================
>> Mar 26 13:17:24 hannibal [FIAIF_MARTIAN]: IN= OUT=eth0 MAC= SRC=85.10.199.34 DST=79.140.49.126 LEN=60 TOS=08 PREC=0x00 TTL=64
>> ID=26203 DF PROTO=TCP SPT=32774 DPT=25 SEQ=554272982 ACK=0 WINDOW=5840 SYN URGP=0
>>
>> I googled something about MARTIAN and Firewall but didn't came up with a real solution
>>
>> Do you have some hints for me?
>>
>> best regards
>> Sebastian
>>
>> _______________________________________________
>> fiaif mailing list
>> fiaif at fiaif.net
>> https://www.fiaif.net/mailman/listinfo/fiaif
>>
> 
> 


-- 
Anders Fugmann      afu at fugmann.net
Mosegård Park 9     DK-3500 Værløse
Pho: +45 3927 7371  Mob: +45 2260 0368