Re: ipfilter question, iis smtp
From: Marc Spitzer (marc@oscar.eng.cv.net)Date: 01/05/02
- Next message: Herb Rosenberg: "Firewall software with Linksys??"
- Previous message: DarthGumby: "Re: Ports necessary for running a FTP-server?"
- Maybe in reply to: Marc Spitzer: "ipfilter question, iis smtp"
- Next in thread: Greg Hennessy: "Re: ipfilter question, iis smtp"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: marc@oscar.eng.cv.net (Marc Spitzer) Date: Sat, 05 Jan 2002 22:02:47 GMT
In article <20020105.21453600@E2.>, Jacques Bourdeau wrote:
> Hi,
>
>> That could be helpful, I was told that it wass iis doing
>> the outbound smtp.
>
> IIS can be used to launch anything. It can launch a small
> program which send mail, but IIS itself is not an SMTP server.
>
> You surely not need Exchange for doing what you need, but you
> should understand that IIS is not an SMTP server.
I do not know MS stuff. I was told iis was doing it and I assumed
that I was told the correct thing by my people. I will have to get
the nit comb out and pay more attention to what is gong on on their
windows boxes.
>
>> >> Does a smtp server( iis) behave any differently then
>> >> a client when trying to deliver the mail
>> >
>> > Should not : look in your logs and you will surely found why the
>> > connection is denyed.
>> >
>
>> I guess I will have to start at them some more.
>
> Tell us what is dropped in the log. Its surely the most valuable
> information for doing remote debugging.
Yes I know but there is a bit of a delay between when it happens and
when it shows up in syslog.
>
>> > What ? Packets from netx/28 was received over fxp1 in the first rule
>> > and now its over fxp0 ?!? Look your interface and be sure on which one
>> > your IIS server is connected to.
>
>> I have fxp0 to internet fxp1 app layer.
>
> OK, so the typo was in your second rule.
>
> Use these rules in IP Filter for debuggin only :
>
> pass in log quick on fxp1 proto tcp from IIS.Server.Name port > 1023 to \
> smtp.server.name port = smtp flags S/SA keep state
> block in log quick all
Thanks, I havebeen using loging and tcpdump to see what is going on.
>
> The first one should allow the SMTP connection from your IIS to the SMTP
> server. The second will drop anything else. Both rules use log, so the
> log should be very explicit about the problem.
>
> Jacques Bourdeau
Thank you for the help. It is nice to have people to talk to about
this stuff.
marc
- Next message: Herb Rosenberg: "Firewall software with Linksys??"
- Previous message: DarthGumby: "Re: Ports necessary for running a FTP-server?"
- Maybe in reply to: Marc Spitzer: "ipfilter question, iis smtp"
- Next in thread: Greg Hennessy: "Re: ipfilter question, iis smtp"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|