Re: ipfilter question, iis smtp

From: Marc Spitzer (marc@oscar.eng.cv.net)
Date: 01/05/02


From: marc@oscar.eng.cv.net (Marc Spitzer)
Date: Sat, 05 Jan 2002 22:02:47 GMT

In article <20020105.21453600@E2.>, Jacques Bourdeau wrote:
> Hi,
>
>> That could be helpful, I was told that it wass iis doing
>> the outbound smtp.
>
> IIS can be used to launch anything. It can launch a small
> program which send mail, but IIS itself is not an SMTP server.
>
> You surely not need Exchange for doing what you need, but you
> should understand that IIS is not an SMTP server.

I do not know MS stuff. I was told iis was doing it and I assumed
that I was told the correct thing by my people. I will have to get
the nit comb out and pay more attention to what is gong on on their
windows boxes.

>
>> >> Does a smtp server( iis) behave any differently then
>> >> a client when trying to deliver the mail
>> >
>> > Should not : look in your logs and you will surely found why the
>> > connection is denyed.
>> >
>
>> I guess I will have to start at them some more.
>
> Tell us what is dropped in the log. Its surely the most valuable
> information for doing remote debugging.

Yes I know but there is a bit of a delay between when it happens and
when it shows up in syslog.

>
>> > What ? Packets from netx/28 was received over fxp1 in the first rule
>> > and now its over fxp0 ?!? Look your interface and be sure on which one
>> > your IIS server is connected to.
>
>> I have fxp0 to internet fxp1 app layer.
>
> OK, so the typo was in your second rule.
>
> Use these rules in IP Filter for debuggin only :
>
> pass in log quick on fxp1 proto tcp from IIS.Server.Name port > 1023 to \
> smtp.server.name port = smtp flags S/SA keep state
> block in log quick all

Thanks, I havebeen using loging and tcpdump to see what is going on.

>
> The first one should allow the SMTP connection from your IIS to the SMTP
> server. The second will drop anything else. Both rules use log, so the
> log should be very explicit about the problem.
>
> Jacques Bourdeau

Thank you for the help. It is nice to have people to talk to about
this stuff.

marc



Relevant Pages

  • Re: SMTP and IIS Admin Service terminated unexpectly
    ... of things that died on him, not just SMTP and IIS. ... says that its IIS if SMTP and IIS are dying together. ... >I am exploring the worm and hotfix possibility now. ... >> events are found in the System event log. ...
    (microsoft.public.exchange.admin)
  • Re: ipfilter question, iis smtp
    ... In article, Jacques Bourdeau wrote: ... >> I have a rule to allow iis to deliver mail through my freebsd IPF ... but any SMTP server all over the world. ... interface and the firewall logs. ...
    (comp.security.firewalls)
  • Re: smtp mail server on win 2003 sends mail to qmail servers is rejected
    ... There are several places in our website code where we send e-mail messages ... malformed message through the SMTP server. ... IIS 6, ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: SMTP and IIS Admin Service terminated unexpectly
    ... I created another Virtual SMTP server, ... SMTP servers go down. ... service dies, it takes SMTP/POP3/Routing Engine with it. ... IIS restarts automatically, but Exchange Services don't. ...
    (microsoft.public.exchange.admin)
  • Re: How to disable CHUNKING/BDAT on a standalone window 2000 SMTP server?
    ... Change the smtpInboundCommandSupportOptions value in IIS metabase using ... IIS 6.0 Metabase Property Reference ... The problem is, however, Cisco doesn't block the SMTP chunking ... advertisement from the receiving server, so our server always tried to ...
    (microsoft.public.exchange.connectivity)

Quantcast