Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
Strony: 1
Witam,
Zainstalowałem serwer wg opisu z tej stronki:
http://www.howtoforge.com/perfect-server-debian-whe … spconfig-3-p3
niby wszystko działa, ale:
1. gdy pisze maila do np gmail to go odbiore.
2. gdy odpowiadam na maila z gmail.com mail nie dochodzi, nie ma zadnej zwrotki etc...
3. gdy maila wyśle do siebie samego z serwera to dochodzi
4. telnet ze środka serwera działa na porty 143, 587 (zmieniłem port), 110
5. telnet z mojego domu do tego serwara zawsze odrzucony na kazdy z portów...
6. nie posiadam firewalla, jedynie fail2ban, ale na czas testów dałem mu stop
7. posiadam reguły iptables, ale na czas testów wyglądały tak:
Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere REJECT all -- anywhere loopback/8 reject-with icmp-port-unreachable ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:http-alt ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:2252 ACCEPT icmp -- anywhere anywhere icmp echo-request LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix "iptables denied: " REJECT all -- anywhere anywhere reject-with icmp-port-unreachable ACCEPT tcp -- anywhere anywhere tcp dpt:munin ACCEPT tcp -- anywhere anywhere tcp dpt:imap2 Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere
W tym momęcie brakło mi pomysłów co to może być. :(
Dodam jeszcze konfigi:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = /usr/share/doc/postfix
# TLS parameters
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = kurierolsztynski.pl
alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
alias_database = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
myorigin = /etc/mailname
mydestination = $myhostname, wmtv.pl, ks220326.kimsufi.com, localhost, localhost.localdomain
relayhost =
mynetworks = 127.0.0.0/8 [::1]/128
#mynetworks = 0.0.0.0/0 [::1]/128
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
html_directory = /usr/share/doc/postfix/html
virtual_alias_domains =
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf, hash:/var/lib/mailman/data/virtual-mai$
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /var/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
inet_protocols = all
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destinat$
smtpd_tls_security_level = may
transport_maps = hash:/var/lib/mailman/data/transport-mailman, proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf
relay_recipient_maps = mysql:/etc/postfix/mysql-virtual_relayrecipientmaps.cf
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $r$
smtpd_sender_restrictions = check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf
smtpd_client_restrictions = check_client_access mysql:/etc/postfix/mysql-virtual_client.cf
smtpd_client_message_rate_limit = 100
maildrop_destination_concurrency_limit = 1
maildrop_destination_recipient_limit = 1
virtual_transport = dovecot
header_checks = regexp:/etc/postfix/header_checks
mime_header_checks = regexp:/etc/postfix/mime_header_checks
nested_header_checks = regexp:/etc/postfix/nested_header_checks
body_checks = regexp:/etc/postfix/body_checks
owner_request_special = no
dovecot_destination_recipient_limit = 1
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappingsmaster:
#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
587 inet n - - - - smtpd
25 inet n - - - - smtpd
#smtp inet n - - - 1 postscreen
#smtpd pass - - - - - smtpd
#dnsblog unix - - - - 0 dnsblog
#tlsproxy unix - - - - 0 tlsproxy
submission inet n - - - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
smtps inet n - - - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - n 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d vmail ${extension} ${recipient} ${user} ${nexthop} ${sender}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
# mailbox_transport = lmtp:inet:localhost
# virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus unix - n n - - pipe
# user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix - n n - - pipe
# flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
dovecot unix - n n - - pipe
flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}
amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
127.0.0.1:10025 inet n - - - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checksi dovecot
listen = *,[::]
protocols = imap pop3
auth_mechanisms = plain login
disable_plaintext_auth = no
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_privileged_group = vmail
ssl_cert = </etc/postfix/smtpd.cert
ssl_key = </etc/postfix/smtpd.key
passdb {
args = /etc/dovecot/dovecot-sql.conf
driver = sql
}
userdb {
args = /etc/dovecot/dovecot-sql.conf
driver = sql
}
plugin {
quota = dict:user::file:/var/vmail/%d/%n/.quotausage
sieve=/var/vmail/%d/%n/.sieve
}
service auth {
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
}
unix_listener auth-userdb {
group = vmail
mode = 0600
user = vmail
}
user = root
}
service imap-login {
client_limit = 1000
process_limit = 500
}
protocol imap {
mail_plugins = quota imap_quota
}
protocol pop3 {
pop3_uidl_format = %08Xu%08Xv
mail_plugins = quota
}
protocol lda {
mail_plugins = sieve quota
}Dodam ze teraz na tyle przekombinowałem ze do siebie siebie poczta tez nie dochodzi ;/
Ostatnio edytowany przez pidraf (2013-09-29 17:40:07)
Offline







Podobno człowiek...;)








Zakręciłeś się z tym serwerem, jak słoik z konfiturami.
Do testowania połączeń SMTP masz program swaks a do diagnozowania kłopotów z daną usługą masz logi.
I nie mieszaj Postfixa z Dovecotem, to dwa różne programy do rożnych usług sieciowych, konfiguruje się je osobno.
Offline
Tak wiem że się zakreciłem...bo teraz to już mi nic nie chodzi...moze podpowiesz mi co by tu mogło być źle? ;)
Niestety logi są dość pustawe jak na to że nie działa...
Ostatnio edytowany przez pidraf (2013-09-29 18:39:50)
Offline







Podobno człowiek...;)








Append one or more "-v" options to selected daemon definitions in /etc/postfix/master.cf and type "postfix reload". This will cause a lot of activity to be logged to the syslog daemon. For example, to make the Postfix SMTP server process more verbose:
/etc/postfix/master.cf:
smtp inet n - n - - smtpd -v
Sznurek:
http://www.postfix.org/DEBUG_README.html#verbose
i do Dovecota:
http://wiki2.dovecot.org/Logging
To na "pustawe" logi.
Ostatnio edytowany przez Jacekalex (2013-09-29 19:22:16)
Offline
OKI...no logi niewątpliwie wygladaja lepiej...natomiast nie bardzo widze jakieś wpisy które mogłyby coś tam psuć...mogłbyś na nie zobaczyć?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: all
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: inet_addr_local: configured 2 IPv4 addresses
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: inet_addr_local: configured 3 IPv6 addresses
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: process generation: 3 (3)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: mynetworks ~? debug_peer_list
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: mynetworks ~? fast_flush_domains
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: mynetworks ~? mynetworks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? debug_peer_list
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? fast_flush_domains
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? mynetworks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? permit_mx_backup_networks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? qmqpd_authorized_clients
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? smtpd_access_maps
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: relay_domains: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: user = ispconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: password = edc9e613e98b81e24d9a69d984875e03
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: dbname = mailconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: result_format = %s
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_relaydomains.cf: expansion_limit = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: query = <NULL>
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: table = mail_transport
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: select_field = domain
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: where_field = domain
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: additional_conditions = and active = 'y' and server_id = 1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: domain =
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: hosts = 127.0.0.1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_relaydomains.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? debug_peer_list
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? fast_flush_domains
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? mynetworks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? permit_mx_backup_networks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: connect to subsystem private/proxymap
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = unix:passwd.byname
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=fixed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:unix:passwd.byname
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Compiled against Berkeley DB: 5.1.29?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Run-time linked against Berkeley DB: 5.1.29?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: hash:/etc/aliases
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Compiled against Berkeley DB: 5.1.29?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Run-time linked against Berkeley DB: 5.1.29?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: hash:/var/lib/mailman/data/aliases
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = mysql:/etc/postfix/mysql-virtual_forwardings.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=mysql:/etc/postfix/mysql-virtual_forwardings.cf status=0 server_flags=fixed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = mysql:/etc/postfix/mysql-virtual_email2email.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=mysql:/etc/postfix/mysql-virtual_email2email.cf status=0 server_flags=fixed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Compiled against Berkeley DB: 5.1.29?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Run-time linked against Berkeley DB: 5.1.29?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: warning: database /var/lib/mailman/data/virtual-mailman.db is older than source file /var/lib/mailman/data/virtual-mailman
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: hash:/var/lib/mailman/data/virtual-mailman
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=mysql:/etc/postfix/mysql-virtual_mailboxes.cf status=0 server_flags=fixed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: user = ispconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: password = edc9e613e98b81e24d9a69d984875e03
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: dbname = mailconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: result_format = %s
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: expansion_limit = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: query = <NULL>
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: table = mail_relay_recipient
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: select_field = access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: where_field = source
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: additional_conditions = and active = 'y' and server_id = 1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: domain =
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: hosts = 127.0.0.1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_relayrecipientmaps.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? debug_peer_list
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? fast_flush_domains
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? mynetworks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? permit_mx_backup_networks
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? smtpd_access_maps
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: user = ispconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: password = edc9e613e98b81e24d9a69d984875e03
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: dbname = mailconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: result_format = %s
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_client.cf: expansion_limit = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: query = <NULL>
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: table = mail_access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: select_field = access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: where_field = source
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: additional_conditions = and type = 'client' and active = 'y'
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: domain =
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: hosts = 127.0.0.1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_client.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: user = ispconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: password = edc9e613e98b81e24d9a69d984875e03
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: dbname = mailconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: result_format = %s
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_sender.cf: expansion_limit = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: query = <NULL>
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: table = mail_access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: select_field = access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: where_field = source
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: additional_conditions = and type = 'sender' and active = 'y' and server_id = 1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: domain =
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: hosts = 127.0.0.1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_sender.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: user = ispconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: password = edc9e613e98b81e24d9a69d984875e03
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: dbname = mailconfig
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: result_format = %s
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_recipient.cf: expansion_limit = 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: query = <NULL>
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: table = mail_access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: select_field = access
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: where_field = source
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: additional_conditions = and type = 'recipient' and active = 'y' and server_id = 1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: domain =
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: hosts = 127.0.0.1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_recipient.cf
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unknown_helo_hostname_tempfail_action = defer_if_permit
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unknown_address_tempfail_action = defer_if_permit
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unverified_recipient_tempfail_action = defer_if_permit
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unverified_sender_tempfail_action = defer_if_permit
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_create: transport=local endpoint=private/tlsmgr
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_open: connected to private/tlsmgr
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = seed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr size = 32
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: seed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: seed
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: XM0bCKZus4quixMp5OsBj/xslRnBDuRqR1a9j2VISeQ=
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: (list terminator)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = policy
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr cache_type = smtpd
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: cachable
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: cachable
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 1
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: (list terminator)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end)
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: fast_flush_domains ~? debug_peer_list
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: fast_flush_domains ~? fast_flush_domains
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: no_address_mappings
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_create: transport=local endpoint=private/anvil
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: connection established
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: master_notify: status 0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: resource
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: software
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: connect from ks220326.kimsufi.com[188.165.242.24]
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: ks220326.kimsufi.com: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: 188.165.242.24: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: ks220326.kimsufi.com: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: 188.165.242.24: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: smtp_stream_setup: maxtime=300 enable_deadline=0
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostname: ks220326.kimsufi.com ~? 127.0.0.0/8
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostaddr: 188.165.242.24 ~? 127.0.0.0/8
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostname: ks220326.kimsufi.com ~? [::1]/128
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostaddr: 188.165.242.24 ~? [::1]/128
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: ks220326.kimsufi.com: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: 188.165.242.24: no match
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_open: connected to private/anvil
Sep 29 19:41:50 ks220326 postfix/cleanup[1555]: warning: database /var/lib/mailman/data/virtual-mailman.db is older than source file /var/lib/mailman/data/virtual-mailman
Sep 29 19:41:50 ks220326 postfix/cleanup[1555]: 748C413A9: message-id=<20130929174150.748C413A9@ks220326.kimsufi.com>
Sep 29 19:41:50 ks220326 postfix/qmgr[1481]: 748C413A9: from=<test@wmtv.pl>, size=469, nrcpt=1 (queue active)
Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: warning: database /var/lib/mailman/data/virtual-mailman.db is older than source file /var/lib/mailman/data/virtual-mailman
Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: connect from localhost.localdomain[127.0.0.1]
Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: 0CFD713AA: client=localhost.localdomain[127.0.0.1]
Sep 29 19:41:55 ks220326 postfix/cleanup[1555]: 0CFD713AA: message-id=<20130929174150.748C413A9@ks220326.kimsufi.com>
Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: disconnect from localhost.localdomain[127.0.0.1]
Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 0CFD713AA: from=<test@wmtv.pl>, size=930, nrcpt=1 (queue active)
Sep 29 19:41:55 ks220326 amavis[25307]: (25307-18) Passed CLEAN {RelayedInbound}, [188.165.242.24]:56150 [188.165.242.24] <test@wmtv.pl> -> <test@wmtv.pl>, Queue-ID: 748C413A9, Message-ID: <20130929174150.748C413A9@ks220326.kimsufi.com>, mail_id: bLkEOOrcdPUb, Hits: 0.51, size: 469, queued_as: 0CFD713AA, 4574 ms
Sep 29 19:41:55 ks220326 postfix/smtp[1556]: 748C413A9: to=<test@wmtv.pl>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.6, delays=0.04/0.01/0/4.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 0CFD713AA)
Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 748C413A9: removed
Sep 29 19:41:55 ks220326 dovecot: auth-worker(1562): mysql(localhost): Connected to database mailconfig
Sep 29 19:41:55 ks220326 dovecot: lda(test@wmtv.pl): sieve: msgid=<20130929174150.748C413A9@ks220326.kimsufi.com>: stored mail into mailbox 'INBOX'
Sep 29 19:41:55 ks220326 postfix/pipe[1560]: 0CFD713AA: to=<test@wmtv.pl>, relay=dovecot, delay=0.17, delays=0.04/0.01/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service)
Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 0CFD713AA: removedjest to oczywiście wywołanie komendy swaks --to test@wmtv.pl --from test@wmtv.pl
Ostatnio edytowany przez pidraf (2013-09-29 19:52:21)
Offline







Podobno człowiek...;)








Sep 29 19:41:55 ks220326 dovecot: lda(test@wmtv.pl): sieve: msgid=<20130929174150.748C413A9@ks220326.kimsufi.com>: stored mail into mailbox 'INBOX' Sep 29 19:41:55 ks220326 postfix/pipe[1560]: 0CFD713AA: to=<test@wmtv.pl>, relay=dovecot, delay=0.17, delays=0.04/0.01/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service) Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 0CFD713AA: removed
Mail doszedł do Dovecota i zdaniem Dovecota został zapisany do skrzynki.
W roli MDA (Mail Delivery Agent) masz Dovecota-lda.
Ostatnio edytowany przez Jacekalex (2013-09-29 20:14:30)
Offline
ha...też mi się tak wydawało...ale jak wlazłem do skrzynki odbiorczej to postaowiłem wysłać Ci logi do sprawdzenia...
Nie widać go w odbiorczej :(
Offline







Podobno człowiek...;)








To znaczy, ze Dovecot pakuje maile nie do tej skrzynki, co trzeba, popraw konfig Dovecota, żeby wiedział, gdzie to pakować.
Postaw i skonfiguruj tego Dovecota, żeby maile były widoczne w kliencie IMAP/POP3.
I zobacz, na jakich adresach wiszą usługi pocztowe, bo przez internet widać tam tylko Apacha na porcie 80/http.
Czyli np w konsoli serwera:
lsof -i
Ostatnio edytowany przez Jacekalex (2013-09-29 20:22:40)
Offline
Dobra udało sie...widać je ;)
Teraz taka rzecz:
czy wiesz z jakiego powodu może nie dochodzić poczta wysłana z zewnątrz? tj. gdy wysyłam np z gmaila to nie dochodzi...
i wiesz mzoec czemu telnet nap port 143, 110, 587 nie odpowiada? ;/
i jeszcze jedno: czy napewno aby zmienić port smtp wystarczy jedna linijka?
587 inet n - - - - smtpd -v
Ostatnio edytowany przez pidraf (2013-09-29 20:25:14)
Offline







Podobno człowiek...;)








nmap -sV --all wmtv.pl Starting Nmap 6.25 ( http://nmap.org ) at 2013-09-29 20:24 CEST Nmap scan report for wmtv.pl (188.165.242.24) Host is up (0.034s latency). Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.22 ((Debian)) 443/tcp closed https Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 27.23 seconds
To wszystko, co widać na tym serwerze.
I co rozumiesz przez "zmienić port smtp"?
Pytam, bo inne serwery SMTP zawsze wyślą maila na port 25/smtp,
i tego nie zmienisz.
Ostatnio edytowany przez Jacekalex (2013-09-29 20:34:47)
Offline
No tak, ale kurcze ja mam porty otwarte...brakuje Ci tutaj jeszcze ssh, na bank działa ;) coś to nie do konca zadziałało :( Masz pomysł jak to otworzyć?
Offline







Podobno człowiek...;)








Pokaż
lsof -i
z roota, z konsoli serwera.
I sprawdź wszystkie tablice firewalla:
iptables -S iptables -t raw -S iptables -t mangle -S iptables -t nat -S
Offline
Chodzi mi o to zebym się móŋł jakoś programem pocztowym połaczyc, a akurat ja mam blokowany port 25 ;/
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
apache2 2421 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 2421 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 2421 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 2421 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
/usr/sbin 3102 amavis 5u IPv4 9242 0t0 TCP localhost.localdomain:10024 (LISTEN)
/usr/sbin 3102 amavis 11u IPv4 118851 0t0 TCP localhost.localdomain:51364->localhost.localdomain:mysql (ESTABLISHED)
ntpd 4605 ntp 16u IPv4 8756 0t0 UDP *:ntp
ntpd 4605 ntp 17u IPv6 8757 0t0 UDP *:ntp
ntpd 4605 ntp 18u IPv4 3929 0t0 UDP localhost.localdomain:ntp
ntpd 4605 ntp 19u IPv4 3930 0t0 UDP ks220326.kimsufi.com:ntp
sshd 4685 root 3u IPv4 5689 0t0 TCP *:2252 (LISTEN)
sshd 4685 root 4u IPv6 5691 0t0 TCP *:2252 (LISTEN)
named 4703 bind 20u IPv4 8800 0t0 TCP localhost.localdomain:domain (LISTEN)
named 4703 bind 21u IPv6 8802 0t0 TCP ip6-localhost:domain (LISTEN)
named 4703 bind 22u IPv4 8810 0t0 TCP localhost.localdomain:953 (LISTEN)
named 4703 bind 23u IPv6 8811 0t0 TCP ip6-localhost:953 (LISTEN)
named 4703 bind 512u IPv4 8799 0t0 UDP localhost.localdomain:domain
named 4703 bind 513u IPv6 8801 0t0 UDP ip6-localhost:domain
memcached 4733 nobody 26u IPv4 4992 0t0 TCP localhost.localdomain:11211 (LISTEN)
memcached 4733 nobody 27u IPv4 4994 0t0 UDP localhost.localdomain:11211
mysqld 5096 mysql 10u IPv4 5767 0t0 TCP *:mysql (LISTEN)
mysqld 5096 mysql 31u IPv4 137823 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51692 (ESTABLISHED)
mysqld 5096 mysql 32u IPv4 146539 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51804 (ESTABLISHED)
mysqld 5096 mysql 644u IPv4 118480 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51364 (ESTABLISHED)
mysqld 5096 mysql 647u IPv4 146545 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51807 (ESTABLISHED)
mysqld 5096 mysql 650u IPv4 144729 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51808 (ESTABLISHED)
mysqld 5096 mysql 651u IPv4 144730 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51809 (ESTABLISHED)
sshd 5280 root 3u IPv4 5782 0t0 TCP ks220326.kimsufi.com:2252->bdk185.neoplus.adsl.tpnet.pl:46881 (ESTABLISHED)
/usr/sbin 5282 amavis 5u IPv4 9242 0t0 TCP localhost.localdomain:10024 (LISTEN)
apache2 5959 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 5959 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 5959 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 5959 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 5966 www-data 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 5966 www-data 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 5966 www-data 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 5966 www-data 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
dovecot 6234 root 22u IPv4 12426 0t0 TCP *:pop3 (LISTEN)
dovecot 6234 root 23u IPv6 12427 0t0 TCP *:pop3 (LISTEN)
dovecot 6234 root 24u IPv4 12428 0t0 TCP *:pop3s (LISTEN)
dovecot 6234 root 25u IPv6 12429 0t0 TCP *:pop3s (LISTEN)
dovecot 6234 root 32u IPv4 12442 0t0 TCP *:imap2 (LISTEN)
dovecot 6234 root 33u IPv6 12443 0t0 TCP *:imap2 (LISTEN)
dovecot 6234 root 34u IPv4 12444 0t0 TCP *:imaps (LISTEN)
dovecot 6234 root 35u IPv6 12445 0t0 TCP *:imaps (LISTEN)
munin-nod 6313 root 5u IPv4 11699 0t0 TCP localhost.localdomain:munin (LISTEN)
sshd 6393 pidraf 3u IPv4 5782 0t0 TCP ks220326.kimsufi.com:2252->bdk185.neoplus.adsl.tpnet.pl:46881 (ESTABLISHED)
apache2 7154 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 7154 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 7154 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 7154 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 8956 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 8956 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 8956 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 8956 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 8962 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 8962 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 8962 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 8962 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 8966 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 8966 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 8966 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 8966 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 9016 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 9016 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 9016 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 9016 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 9024 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 9024 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 9024 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 9024 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 10842 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 10842 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 10842 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 10842 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 10844 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 10844 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 10844 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 10844 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
/usr/sbin 11441 amavis 5u IPv4 9242 0t0 TCP localhost.localdomain:10024 (LISTEN)
/usr/sbin 11441 amavis 11u IPv4 132067 0t0 TCP localhost.localdomain:51692->localhost.localdomain:mysql (ESTABLISHED)
/usr/sbin 11441 amavis 12u IPv4 141266 0t0 TCP localhost.localdomain:43599->localhost.localdomain:10025 (CLOSE_WAIT)
apache2 11448 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 11448 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 11448 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 11448 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
master 12886 root 12u IPv4 145416 0t0 TCP *:smtp (LISTEN)
master 12886 root 13u IPv6 145418 0t0 TCP *:smtp (LISTEN)
master 12886 root 17u IPv4 145424 0t0 TCP *:submission (LISTEN)
master 12886 root 18u IPv6 145426 0t0 TCP *:submission (LISTEN)
master 12886 root 21u IPv4 145432 0t0 TCP *:ssmtp (LISTEN)
master 12886 root 22u IPv6 145434 0t0 TCP *:ssmtp (LISTEN)
master 12886 root 118u IPv4 145532 0t0 TCP localhost.localdomain:10025 (LISTEN)
proxymap 13318 postfix 11u IPv4 144714 0t0 TCP localhost.localdomain:51804->localhost.localdomain:mysql (ESTABLISHED)
proxymap 13318 postfix 12u IPv4 139172 0t0 TCP localhost.localdomain:51807->localhost.localdomain:mysql (ESTABLISHED)
proxymap 13318 postfix 13u IPv4 139175 0t0 TCP localhost.localdomain:51808->localhost.localdomain:mysql (ESTABLISHED)
proxymap 13318 postfix 14u IPv4 143984 0t0 TCP localhost.localdomain:51809->localhost.localdomain:mysql (ESTABLISHED)
smtpd 13324 postfix 6u IPv4 145532 0t0 TCP localhost.localdomain:10025 (LISTEN)
iptables -S
-P INPUT DROP -P FORWARD ACCEPT -P OUTPUT ACCEPT -N fail2ban-ssh -A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh -A INPUT -i lo -j ACCEPT -A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 2252 -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7 -A INPUT -j REJECT --reject-with icmp-port-unreachable -A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT -A INPUT -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT -A INPUT -p tcp -m tcp --dport 143 -j ACCEPT -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT -A OUTPUT -j ACCEPT -A fail2ban-ssh -j RETURN
iptables -t raw -S
-P PREROUTING ACCEPT -P OUTPUT ACCEPT
iptables -t mangle -S
-P PREROUTING ACCEPT -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT
iptables -t nat -S
-P PREROUTING ACCEPT -P INPUT ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT
Ostatnio edytowany przez pidraf (2013-09-29 20:53:53)
Offline







Podobno człowiek...;)








Ja też mam zablokowany port 25, ale na tym serwerze wmtv.pl nie widać żadnej usługi impa, imaps, smtp na portach 587 i 465, pop3 czy pop3s.
Na wyniku lsof widać kilka takich usług, czyli powinny być widoczne w necie.
Przez net widać jednak tylko Apacha na porcie 80.
Wniosek jest taki, że po drodze jest jakiś firewall, który blokuje inne porty.
U mnie nmap pokazuje, że te porty są filtrowane.
SSH też nie widzę, ale to akurat nie jest żadna tragedia.
EDIT:
Kto tak popieprzył tego firewalla?
-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
-A INPUT -i lo -j ACCEPT
-A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2252 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
Kolejność reguł w firewallu ma kluczowe znaczenie, zwłaszcza przy regułach, które kończą przetwarzanie pakietu, jak ACCEPT, DROP i REJECT.
Sznurek: http://pl.wikibooks.org/wiki/Sieci_w_Linuksie/Netfilter
Failbana też można instalować dopiero, jak wszystko działa, a nie w czasie, kiedy jeszcze 3/4 usług nie działa w ogóle, albo ich nie widać w sieci.
EDIT2:
Już widzę te porty, twój serwer jest na liście PEERBLOCKa, załapał się też na blokadę u mnie. :D
Ostatnio edytowany przez Jacekalex (2013-09-29 21:21:19)
Offline
O rany...ide jutro do okulisty! ;/;) działa :) wielkie dizięki! :) Przeoczyłem tego REJECT wzrokiem.;)
Offline
Strony: 1