Re: ipfw and mail

From: James Housley (jim_at_thehousleys.net)
Date: 06/25/04

  • Next message: Bob Martin: "Re: ipfw and mail"
    Date: Fri, 25 Jun 2004 15:30:11 -0400
    To: "Gustavo A. Baratto" <gbaratto@superb.net>
    
    
    

    On Jun 25, 2004, at 2:00 PM, Gustavo A. Baratto wrote:

    > Hello guys,
    >
    > some of our users' ISPs don't allow them to use port 25, so they
    > cannot use out mail server.
    >
    > I want to open a new port (2525) and forward all packets from 2525 to
    > 25 so, they can use mail.
    >
    > I tried this in IPFW:
    > 0100 119649 44772439 allow tcp from any to me dst-port 25 keep-state
    > 0200 0 0 divert 25 ip from any to me dst-port 2525
    > keep-state
    > 0300 103075 35531648 allow ip from me to any keep-state
    > 0400 60 4530 deny log ip from any to any
    >
    >
    > If I telnet directly to port 25, I can get the prompt, but if I telnet
    > to port 2525, I get a connection refused.
    >
    > What should I do in ipfw to forward port 2525 to port 25 tranparently?
    >

    I have done that with natd and ipfw. I think you want a forward rule
    instead of divert

    Jim

    --
    /"\   ASCII Ribbon Campaign  .
    \ / - NO HTML/RTF in e-mail  .
      X  - NO Word docs in e-mail .
    / \ -----------------------------------------------------------------
    jeh@FreeBSD.org      http://www.FreeBSD.org     The Power to Serve
    jim@TheHousleys.Net  http://www.TheHousleys.net
    ---------------------------------------------------------------------
    Do not meddle in the affairs of dragons, for you are crunchy and taste
         good with ketchup.
    

  • Next message: Bob Martin: "Re: ipfw and mail"

    Relevant Pages

    • Re: Fully spam/virus filtered mail, and reliable outbound relay
      ... I'm not aware of this rate limiting software for port 25 connections but would ... have thought that the ideal way to implement that would be on the ISPs central ... users to send through the organisations mail server is a good idea. ...
      (sci.electronics.design)
    • Re: Fully spam/virus filtered mail, and reliable outbound relay
      ... I'm not aware of this rate limiting software for port 25 connections but would ... have thought that the ideal way to implement that would be on the ISPs central ... users to send through the organisations mail server is a good idea. ...
      (comp.security.misc)
    • Re: E-mail problem
      ... Port 25 is the classic port for POP3 mail servers. ... It's just not being used to access the incoming mail server. ... When the ISP requires secure password authentication, rather than clear text authentication, to it's service account, it must use the new port assigned for secure password authentication. ... It is designed to be used when you are outsdide the firewall. ...
      (rec.outdoors.rv-travel)
    • The FreeBSD Diary -- Is your ISP blocking port 25? Heres a Postfix solution.
      ... My ISP started blocking incoming port 25. ... This solution assumes you have a mail server at home and at least one other mail server out there on the Internet, one which does not have port 25 blocked. ... I started by adding the following line to /usr/local/etc/postfix/ master.cf on my Postfix mail server at home: ... Then I added this to /usr/local/etc/postfix/main.cf on my public mail server: ...
      (freebsd-questions)
    • Re: The FreeBSD Diary -- Is your ISP blocking port 25? Heres a Postfix solution.
      ... Here's a Postfix solution.10 February 2006 ... My ISP started blocking incoming port 25. ... This solution assumes you have a mail server at home and at least one ... Then I sent a test message from the public mail server ...
      (freebsd-questions)