Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
Strony: 1
Witam,
Zainstalowałem serwer wg opisu z tej stronki:
http://www.howtoforge.com/perfect-server-debian-whe … spconfig-3-p3
niby wszystko działa, ale:
1. gdy pisze maila do np gmail to go odbiore.
2. gdy odpowiadam na maila z gmail.com mail nie dochodzi, nie ma zadnej zwrotki etc...
3. gdy maila wyśle do siebie samego z serwera to dochodzi
4. telnet ze środka serwera działa na porty 143, 587 (zmieniłem port), 110
5. telnet z mojego domu do tego serwara zawsze odrzucony na kazdy z portów...
6. nie posiadam firewalla, jedynie fail2ban, ale na czas testów dałem mu stop
7. posiadam reguły iptables, ale na czas testów wyglądały tak:
Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere REJECT all -- anywhere loopback/8 reject-with icmp-port-unreachable ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:http-alt ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:2252 ACCEPT icmp -- anywhere anywhere icmp echo-request LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix "iptables denied: " REJECT all -- anywhere anywhere reject-with icmp-port-unreachable ACCEPT tcp -- anywhere anywhere tcp dpt:munin ACCEPT tcp -- anywhere anywhere tcp dpt:imap2 Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere
W tym momęcie brakło mi pomysłów co to może być. :(
Dodam jeszcze konfigi:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version # Debian specific: Specifying a file name will cause the first # line of that file to be used as the name. The Debian default # is /etc/mailname. #myorigin = /etc/mailname smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings #delay_warning_time = 4h readme_directory = /usr/share/doc/postfix # TLS parameters smtpd_tls_cert_file = /etc/postfix/smtpd.cert smtpd_tls_key_file = /etc/postfix/smtpd.key smtpd_use_tls = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for # information on enabling SSL in the smtp client. myhostname = kurierolsztynski.pl alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases alias_database = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases myorigin = /etc/mailname mydestination = $myhostname, wmtv.pl, ks220326.kimsufi.com, localhost, localhost.localdomain relayhost = mynetworks = 127.0.0.0/8 [::1]/128 #mynetworks = 0.0.0.0/0 [::1]/128 mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all html_directory = /usr/share/doc/postfix/html virtual_alias_domains = virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf, hash:/var/lib/mailman/data/virtual-mai$ virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_mailbox_base = /var/vmail virtual_uid_maps = static:5000 virtual_gid_maps = static:5000 inet_protocols = all smtpd_sasl_auth_enable = yes broken_sasl_auth_clients = yes smtpd_sasl_authenticated_header = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destinat$ smtpd_tls_security_level = may transport_maps = hash:/var/lib/mailman/data/transport-mailman, proxy:mysql:/etc/postfix/mysql-virtual_transports.cf relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf relay_recipient_maps = mysql:/etc/postfix/mysql-virtual_relayrecipientmaps.cf proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $r$ smtpd_sender_restrictions = check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf smtpd_client_restrictions = check_client_access mysql:/etc/postfix/mysql-virtual_client.cf smtpd_client_message_rate_limit = 100 maildrop_destination_concurrency_limit = 1 maildrop_destination_recipient_limit = 1 virtual_transport = dovecot header_checks = regexp:/etc/postfix/header_checks mime_header_checks = regexp:/etc/postfix/mime_header_checks nested_header_checks = regexp:/etc/postfix/nested_header_checks body_checks = regexp:/etc/postfix/body_checks owner_request_special = no dovecot_destination_recipient_limit = 1 smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth content_filter = amavis:[127.0.0.1]:10024 receive_override_options = no_address_mappings
master:
# # Postfix master process configuration file. For details on the format # of the file, see the master(5) manual page (command: "man 5 master"). # # Do not forget to execute "postfix reload" after editing this file. # # ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ========================================================================== 587 inet n - - - - smtpd 25 inet n - - - - smtpd #smtp inet n - - - 1 postscreen #smtpd pass - - - - - smtpd #dnsblog unix - - - - 0 dnsblog #tlsproxy unix - - - - 0 tlsproxy submission inet n - - - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING smtps inet n - - - - smtpd -o syslog_name=postfix/smtps -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING #628 inet n - - - - qmqpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - n 300 1 qmgr #qmgr fifo n - n 300 1 oqmgr tlsmgr unix - - - 1000? 1 tlsmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - - - - smtp relay unix - - - - - smtp # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - - - - showq error unix - - - - - error retry unix - - - - - error discard unix - - - - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - - - - lmtp anvil unix - - - - 1 anvil scache unix - - - - 1 scache # # ==================================================================== # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # Many of the following services use the Postfix pipe(8) delivery # agent. See the pipe(8) man page for information about ${recipient} # and other message envelope options. # ==================================================================== # # maildrop. See the Postfix MAILDROP_README file for details. # Also specify in main.cf: maildrop_destination_recipient_limit=1 # maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d vmail ${extension} ${recipient} ${user} ${nexthop} ${sender} # # ==================================================================== # # Recent Cyrus versions can use the existing "lmtp" master.cf entry. # # Specify in cyrus.conf: # lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 # # Specify in main.cf one or more of the following: # mailbox_transport = lmtp:inet:localhost # virtual_transport = lmtp:inet:localhost # # ==================================================================== # # Cyrus 2.1.5 (Amos Gouaux) # Also specify in main.cf: cyrus_destination_recipient_limit=1 # #cyrus unix - n n - - pipe # user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user} # # ==================================================================== # Old example of delivery via Cyrus. # #old-cyrus unix - n n - - pipe # flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user} # # ==================================================================== # # See the Postfix UUCP_README file for configuration details. # uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) # # Other external delivery methods. # ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} amavis unix - - - - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
i dovecot
listen = *,[::] protocols = imap pop3 auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = vmail ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve=/var/vmail/%d/%n/.sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 500 } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } protocol lda { mail_plugins = sieve quota }
Dodam ze teraz na tyle przekombinowałem ze do siebie siebie poczta tez nie dochodzi ;/
Ostatnio edytowany przez pidraf (2013-09-29 17:40:07)
Offline
Zakręciłeś się z tym serwerem, jak słoik z konfiturami.
Do testowania połączeń SMTP masz program swaks a do diagnozowania kłopotów z daną usługą masz logi.
I nie mieszaj Postfixa z Dovecotem, to dwa różne programy do rożnych usług sieciowych, konfiguruje się je osobno.
Offline
Tak wiem że się zakreciłem...bo teraz to już mi nic nie chodzi...moze podpowiesz mi co by tu mogło być źle? ;)
Niestety logi są dość pustawe jak na to że nie działa...
Ostatnio edytowany przez pidraf (2013-09-29 18:39:50)
Offline
Append one or more "-v" options to selected daemon definitions in /etc/postfix/master.cf and type "postfix reload". This will cause a lot of activity to be logged to the syslog daemon. For example, to make the Postfix SMTP server process more verbose:
/etc/postfix/master.cf:
smtp inet n - n - - smtpd -v
Sznurek:
http://www.postfix.org/DEBUG_README.html#verbose
i do Dovecota:
http://wiki2.dovecot.org/Logging
To na "pustawe" logi.
Ostatnio edytowany przez Jacekalex (2013-09-29 19:22:16)
Offline
OKI...no logi niewątpliwie wygladaja lepiej...natomiast nie bardzo widze jakieś wpisy które mogłyby coś tam psuć...mogłbyś na nie zobaczyć?
Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: all Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: inet_addr_local: configured 2 IPv4 addresses Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: inet_addr_local: configured 3 IPv6 addresses Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: process generation: 3 (3) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: mynetworks ~? debug_peer_list Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: mynetworks ~? fast_flush_domains Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: mynetworks ~? mynetworks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? debug_peer_list Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? fast_flush_domains Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? mynetworks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? permit_mx_backup_networks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? qmqpd_authorized_clients Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: relay_domains ~? smtpd_access_maps Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: relay_domains: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: user = ispconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: password = edc9e613e98b81e24d9a69d984875e03 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: dbname = mailconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: result_format = %s Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_relaydomains.cf: expansion_limit = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: query = <NULL> Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: table = mail_transport Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: select_field = domain Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: where_field = domain Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: additional_conditions = and active = 'y' and server_id = 1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: domain = Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relaydomains.cf: hosts = 127.0.0.1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_relaydomains.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? debug_peer_list Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? fast_flush_domains Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? mynetworks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: permit_mx_backup_networks ~? permit_mx_backup_networks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: connect to subsystem private/proxymap Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = unix:passwd.byname Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=fixed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:unix:passwd.byname Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Compiled against Berkeley DB: 5.1.29? Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Run-time linked against Berkeley DB: 5.1.29? Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: hash:/etc/aliases Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Compiled against Berkeley DB: 5.1.29? Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Run-time linked against Berkeley DB: 5.1.29? Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: hash:/var/lib/mailman/data/aliases Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = mysql:/etc/postfix/mysql-virtual_forwardings.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=mysql:/etc/postfix/mysql-virtual_forwardings.cf status=0 server_flags=fixed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = mysql:/etc/postfix/mysql-virtual_email2email.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=mysql:/etc/postfix/mysql-virtual_email2email.cf status=0 server_flags=fixed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Compiled against Berkeley DB: 5.1.29? Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: Run-time linked against Berkeley DB: 5.1.29? Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: warning: database /var/lib/mailman/data/virtual-mailman.db is older than source file /var/lib/mailman/data/virtual-mailman Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: hash:/var/lib/mailman/data/virtual-mailman Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = open Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr table = mysql:/etc/postfix/mysql-virtual_mailboxes.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr flags = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: flags Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 16 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/proxymap socket: wanted attribute: (list terminator) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_proxy_open: connect to map=mysql:/etc/postfix/mysql-virtual_mailboxes.cf status=0 server_flags=fixed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: user = ispconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: password = edc9e613e98b81e24d9a69d984875e03 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: dbname = mailconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: result_format = %s Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: expansion_limit = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: query = <NULL> Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: table = mail_relay_recipient Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: select_field = access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: where_field = source Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: additional_conditions = and active = 'y' and server_id = 1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: domain = Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_relayrecipientmaps.cf: hosts = 127.0.0.1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_relayrecipientmaps.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? debug_peer_list Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? fast_flush_domains Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? mynetworks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? permit_mx_backup_networks Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: smtpd_access_maps ~? smtpd_access_maps Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: user = ispconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: password = edc9e613e98b81e24d9a69d984875e03 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: dbname = mailconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: result_format = %s Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_client.cf: expansion_limit = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: query = <NULL> Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: table = mail_access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: select_field = access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: where_field = source Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: additional_conditions = and type = 'client' and active = 'y' Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: domain = Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_client.cf: hosts = 127.0.0.1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_client.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: user = ispconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: password = edc9e613e98b81e24d9a69d984875e03 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: dbname = mailconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: result_format = %s Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_sender.cf: expansion_limit = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: query = <NULL> Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: table = mail_access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: select_field = access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: where_field = source Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: additional_conditions = and type = 'sender' and active = 'y' and server_id = 1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: domain = Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_sender.cf: hosts = 127.0.0.1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_sender.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: user = ispconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: password = edc9e613e98b81e24d9a69d984875e03 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: dbname = mailconfig Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: result_format = %s Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_int: /etc/postfix/mysql-virtual_recipient.cf: expansion_limit = 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: query = <NULL> Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: table = mail_access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: select_field = access Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: where_field = source Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: additional_conditions = and type = 'recipient' and active = 'y' and server_id = 1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: domain = Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: cfg_get_str: /etc/postfix/mysql-virtual_recipient.cf: hosts = 127.0.0.1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: dict_open: mysql:/etc/postfix/mysql-virtual_recipient.cf Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unknown_helo_hostname_tempfail_action = defer_if_permit Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unknown_address_tempfail_action = defer_if_permit Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unverified_recipient_tempfail_action = defer_if_permit Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: unverified_sender_tempfail_action = defer_if_permit Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_create: transport=local endpoint=private/tlsmgr Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_open: connected to private/tlsmgr Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = seed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr size = 32 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: seed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: seed Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: XM0bCKZus4quixMp5OsBj/xslRnBDuRqR1a9j2VISeQ= Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: (list terminator) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr request = policy Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: send attr cache_type = smtpd Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: status Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: cachable Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: cachable Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute value: 1 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: private/tlsmgr: wanted attribute: (list terminator) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: input attribute name: (end) Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: fast_flush_domains ~? debug_peer_list Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_string: fast_flush_domains ~? fast_flush_domains Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: no_address_mappings Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_create: transport=local endpoint=private/anvil Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: connection established Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: master_notify: status 0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: resource Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: name_mask: software Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: connect from ks220326.kimsufi.com[188.165.242.24] Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: ks220326.kimsufi.com: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: 188.165.242.24: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: ks220326.kimsufi.com: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: 188.165.242.24: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: smtp_stream_setup: maxtime=300 enable_deadline=0 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostname: ks220326.kimsufi.com ~? 127.0.0.0/8 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostaddr: 188.165.242.24 ~? 127.0.0.0/8 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostname: ks220326.kimsufi.com ~? [::1]/128 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_hostaddr: 188.165.242.24 ~? [::1]/128 Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: ks220326.kimsufi.com: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: match_list_match: 188.165.242.24: no match Sep 29 19:41:50 ks220326 postfix/smtpd[1547]: auto_clnt_open: connected to private/anvil Sep 29 19:41:50 ks220326 postfix/cleanup[1555]: warning: database /var/lib/mailman/data/virtual-mailman.db is older than source file /var/lib/mailman/data/virtual-mailman Sep 29 19:41:50 ks220326 postfix/cleanup[1555]: 748C413A9: message-id=<20130929174150.748C413A9@ks220326.kimsufi.com> Sep 29 19:41:50 ks220326 postfix/qmgr[1481]: 748C413A9: from=<test@wmtv.pl>, size=469, nrcpt=1 (queue active) Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: warning: database /var/lib/mailman/data/virtual-mailman.db is older than source file /var/lib/mailman/data/virtual-mailman Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: connect from localhost.localdomain[127.0.0.1] Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: 0CFD713AA: client=localhost.localdomain[127.0.0.1] Sep 29 19:41:55 ks220326 postfix/cleanup[1555]: 0CFD713AA: message-id=<20130929174150.748C413A9@ks220326.kimsufi.com> Sep 29 19:41:55 ks220326 postfix/smtpd[1559]: disconnect from localhost.localdomain[127.0.0.1] Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 0CFD713AA: from=<test@wmtv.pl>, size=930, nrcpt=1 (queue active) Sep 29 19:41:55 ks220326 amavis[25307]: (25307-18) Passed CLEAN {RelayedInbound}, [188.165.242.24]:56150 [188.165.242.24] <test@wmtv.pl> -> <test@wmtv.pl>, Queue-ID: 748C413A9, Message-ID: <20130929174150.748C413A9@ks220326.kimsufi.com>, mail_id: bLkEOOrcdPUb, Hits: 0.51, size: 469, queued_as: 0CFD713AA, 4574 ms Sep 29 19:41:55 ks220326 postfix/smtp[1556]: 748C413A9: to=<test@wmtv.pl>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.6, delays=0.04/0.01/0/4.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 0CFD713AA) Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 748C413A9: removed Sep 29 19:41:55 ks220326 dovecot: auth-worker(1562): mysql(localhost): Connected to database mailconfig Sep 29 19:41:55 ks220326 dovecot: lda(test@wmtv.pl): sieve: msgid=<20130929174150.748C413A9@ks220326.kimsufi.com>: stored mail into mailbox 'INBOX' Sep 29 19:41:55 ks220326 postfix/pipe[1560]: 0CFD713AA: to=<test@wmtv.pl>, relay=dovecot, delay=0.17, delays=0.04/0.01/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service) Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 0CFD713AA: removed
jest to oczywiście wywołanie komendy swaks --to test@wmtv.pl --from test@wmtv.pl
Ostatnio edytowany przez pidraf (2013-09-29 19:52:21)
Offline
Sep 29 19:41:55 ks220326 dovecot: lda(test@wmtv.pl): sieve: msgid=<20130929174150.748C413A9@ks220326.kimsufi.com>: stored mail into mailbox 'INBOX' Sep 29 19:41:55 ks220326 postfix/pipe[1560]: 0CFD713AA: to=<test@wmtv.pl>, relay=dovecot, delay=0.17, delays=0.04/0.01/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service) Sep 29 19:41:55 ks220326 postfix/qmgr[1481]: 0CFD713AA: removed
Mail doszedł do Dovecota i zdaniem Dovecota został zapisany do skrzynki.
W roli MDA (Mail Delivery Agent) masz Dovecota-lda.
Ostatnio edytowany przez Jacekalex (2013-09-29 20:14:30)
Offline
ha...też mi się tak wydawało...ale jak wlazłem do skrzynki odbiorczej to postaowiłem wysłać Ci logi do sprawdzenia...
Nie widać go w odbiorczej :(
Offline
To znaczy, ze Dovecot pakuje maile nie do tej skrzynki, co trzeba, popraw konfig Dovecota, żeby wiedział, gdzie to pakować.
Postaw i skonfiguruj tego Dovecota, żeby maile były widoczne w kliencie IMAP/POP3.
I zobacz, na jakich adresach wiszą usługi pocztowe, bo przez internet widać tam tylko Apacha na porcie 80/http.
Czyli np w konsoli serwera:
lsof -i
Ostatnio edytowany przez Jacekalex (2013-09-29 20:22:40)
Offline
Dobra udało sie...widać je ;)
Teraz taka rzecz:
czy wiesz z jakiego powodu może nie dochodzić poczta wysłana z zewnątrz? tj. gdy wysyłam np z gmaila to nie dochodzi...
i wiesz mzoec czemu telnet nap port 143, 110, 587 nie odpowiada? ;/
i jeszcze jedno: czy napewno aby zmienić port smtp wystarczy jedna linijka?
587 inet n - - - - smtpd -v
Ostatnio edytowany przez pidraf (2013-09-29 20:25:14)
Offline
nmap -sV --all wmtv.pl Starting Nmap 6.25 ( http://nmap.org ) at 2013-09-29 20:24 CEST Nmap scan report for wmtv.pl (188.165.242.24) Host is up (0.034s latency). Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.22 ((Debian)) 443/tcp closed https Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 27.23 seconds
To wszystko, co widać na tym serwerze.
I co rozumiesz przez "zmienić port smtp"?
Pytam, bo inne serwery SMTP zawsze wyślą maila na port 25/smtp,
i tego nie zmienisz.
Ostatnio edytowany przez Jacekalex (2013-09-29 20:34:47)
Offline
No tak, ale kurcze ja mam porty otwarte...brakuje Ci tutaj jeszcze ssh, na bank działa ;) coś to nie do konca zadziałało :( Masz pomysł jak to otworzyć?
Offline
Pokaż
lsof -i
z roota, z konsoli serwera.
I sprawdź wszystkie tablice firewalla:
iptables -S iptables -t raw -S iptables -t mangle -S iptables -t nat -S
Offline
Chodzi mi o to zebym się móŋł jakoś programem pocztowym połaczyc, a akurat ja mam blokowany port 25 ;/
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
apache2 2421 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 2421 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 2421 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 2421 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
/usr/sbin 3102 amavis 5u IPv4 9242 0t0 TCP localhost.localdomain:10024 (LISTEN)
/usr/sbin 3102 amavis 11u IPv4 118851 0t0 TCP localhost.localdomain:51364->localhost.localdomain:mysql (ESTABLISHED)
ntpd 4605 ntp 16u IPv4 8756 0t0 UDP *:ntp
ntpd 4605 ntp 17u IPv6 8757 0t0 UDP *:ntp
ntpd 4605 ntp 18u IPv4 3929 0t0 UDP localhost.localdomain:ntp
ntpd 4605 ntp 19u IPv4 3930 0t0 UDP ks220326.kimsufi.com:ntp
sshd 4685 root 3u IPv4 5689 0t0 TCP *:2252 (LISTEN)
sshd 4685 root 4u IPv6 5691 0t0 TCP *:2252 (LISTEN)
named 4703 bind 20u IPv4 8800 0t0 TCP localhost.localdomain:domain (LISTEN)
named 4703 bind 21u IPv6 8802 0t0 TCP ip6-localhost:domain (LISTEN)
named 4703 bind 22u IPv4 8810 0t0 TCP localhost.localdomain:953 (LISTEN)
named 4703 bind 23u IPv6 8811 0t0 TCP ip6-localhost:953 (LISTEN)
named 4703 bind 512u IPv4 8799 0t0 UDP localhost.localdomain:domain
named 4703 bind 513u IPv6 8801 0t0 UDP ip6-localhost:domain
memcached 4733 nobody 26u IPv4 4992 0t0 TCP localhost.localdomain:11211 (LISTEN)
memcached 4733 nobody 27u IPv4 4994 0t0 UDP localhost.localdomain:11211
mysqld 5096 mysql 10u IPv4 5767 0t0 TCP *:mysql (LISTEN)
mysqld 5096 mysql 31u IPv4 137823 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51692 (ESTABLISHED)
mysqld 5096 mysql 32u IPv4 146539 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51804 (ESTABLISHED)
mysqld 5096 mysql 644u IPv4 118480 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51364 (ESTABLISHED)
mysqld 5096 mysql 647u IPv4 146545 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51807 (ESTABLISHED)
mysqld 5096 mysql 650u IPv4 144729 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51808 (ESTABLISHED)
mysqld 5096 mysql 651u IPv4 144730 0t0 TCP localhost.localdomain:mysql->localhost.localdomain:51809 (ESTABLISHED)
sshd 5280 root 3u IPv4 5782 0t0 TCP ks220326.kimsufi.com:2252->bdk185.neoplus.adsl.tpnet.pl:46881 (ESTABLISHED)
/usr/sbin 5282 amavis 5u IPv4 9242 0t0 TCP localhost.localdomain:10024 (LISTEN)
apache2 5959 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 5959 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 5959 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 5959 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 5966 www-data 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 5966 www-data 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 5966 www-data 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 5966 www-data 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
dovecot 6234 root 22u IPv4 12426 0t0 TCP *:pop3 (LISTEN)
dovecot 6234 root 23u IPv6 12427 0t0 TCP *:pop3 (LISTEN)
dovecot 6234 root 24u IPv4 12428 0t0 TCP *:pop3s (LISTEN)
dovecot 6234 root 25u IPv6 12429 0t0 TCP *:pop3s (LISTEN)
dovecot 6234 root 32u IPv4 12442 0t0 TCP *:imap2 (LISTEN)
dovecot 6234 root 33u IPv6 12443 0t0 TCP *:imap2 (LISTEN)
dovecot 6234 root 34u IPv4 12444 0t0 TCP *:imaps (LISTEN)
dovecot 6234 root 35u IPv6 12445 0t0 TCP *:imaps (LISTEN)
munin-nod 6313 root 5u IPv4 11699 0t0 TCP localhost.localdomain:munin (LISTEN)
sshd 6393 pidraf 3u IPv4 5782 0t0 TCP ks220326.kimsufi.com:2252->bdk185.neoplus.adsl.tpnet.pl:46881 (ESTABLISHED)
apache2 7154 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 7154 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 7154 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 7154 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 8956 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 8956 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 8956 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 8956 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 8962 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 8962 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 8962 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 8962 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 8966 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 8966 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 8966 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 8966 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 9016 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 9016 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 9016 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 9016 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 9024 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 9024 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 9024 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 9024 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 10842 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 10842 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 10842 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 10842 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
apache2 10844 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 10844 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 10844 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 10844 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
/usr/sbin 11441 amavis 5u IPv4 9242 0t0 TCP localhost.localdomain:10024 (LISTEN)
/usr/sbin 11441 amavis 11u IPv4 132067 0t0 TCP localhost.localdomain:51692->localhost.localdomain:mysql (ESTABLISHED)
/usr/sbin 11441 amavis 12u IPv4 141266 0t0 TCP localhost.localdomain:43599->localhost.localdomain:10025 (CLOSE_WAIT)
apache2 11448 root 4u IPv6 12295 0t0 TCP *:http (LISTEN)
apache2 11448 root 6u IPv6 12299 0t0 TCP *:https (LISTEN)
apache2 11448 root 8u IPv6 12303 0t0 TCP *:tproxy (LISTEN)
apache2 11448 root 10u IPv6 12311 0t0 TCP *:http-alt (LISTEN)
master 12886 root 12u IPv4 145416 0t0 TCP *:smtp (LISTEN)
master 12886 root 13u IPv6 145418 0t0 TCP *:smtp (LISTEN)
master 12886 root 17u IPv4 145424 0t0 TCP *:submission (LISTEN)
master 12886 root 18u IPv6 145426 0t0 TCP *:submission (LISTEN)
master 12886 root 21u IPv4 145432 0t0 TCP *:ssmtp (LISTEN)
master 12886 root 22u IPv6 145434 0t0 TCP *:ssmtp (LISTEN)
master 12886 root 118u IPv4 145532 0t0 TCP localhost.localdomain:10025 (LISTEN)
proxymap 13318 postfix 11u IPv4 144714 0t0 TCP localhost.localdomain:51804->localhost.localdomain:mysql (ESTABLISHED)
proxymap 13318 postfix 12u IPv4 139172 0t0 TCP localhost.localdomain:51807->localhost.localdomain:mysql (ESTABLISHED)
proxymap 13318 postfix 13u IPv4 139175 0t0 TCP localhost.localdomain:51808->localhost.localdomain:mysql (ESTABLISHED)
proxymap 13318 postfix 14u IPv4 143984 0t0 TCP localhost.localdomain:51809->localhost.localdomain:mysql (ESTABLISHED)
smtpd 13324 postfix 6u IPv4 145532 0t0 TCP localhost.localdomain:10025 (LISTEN)
iptables -S
-P INPUT DROP -P FORWARD ACCEPT -P OUTPUT ACCEPT -N fail2ban-ssh -A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh -A INPUT -i lo -j ACCEPT -A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 2252 -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7 -A INPUT -j REJECT --reject-with icmp-port-unreachable -A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT -A INPUT -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT -A INPUT -p tcp -m tcp --dport 143 -j ACCEPT -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT -A OUTPUT -j ACCEPT -A fail2ban-ssh -j RETURN
iptables -t raw -S
-P PREROUTING ACCEPT -P OUTPUT ACCEPT
iptables -t mangle -S
-P PREROUTING ACCEPT -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT
iptables -t nat -S
-P PREROUTING ACCEPT -P INPUT ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT
Ostatnio edytowany przez pidraf (2013-09-29 20:53:53)
Offline
Ja też mam zablokowany port 25, ale na tym serwerze wmtv.pl nie widać żadnej usługi impa, imaps, smtp na portach 587 i 465, pop3 czy pop3s.
Na wyniku lsof widać kilka takich usług, czyli powinny być widoczne w necie.
Przez net widać jednak tylko Apacha na porcie 80.
Wniosek jest taki, że po drodze jest jakiś firewall, który blokuje inne porty.
U mnie nmap pokazuje, że te porty są filtrowane.
SSH też nie widzę, ale to akurat nie jest żadna tragedia.
EDIT:
Kto tak popieprzył tego firewalla?
-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
-A INPUT -i lo -j ACCEPT
-A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2252 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
Kolejność reguł w firewallu ma kluczowe znaczenie, zwłaszcza przy regułach, które kończą przetwarzanie pakietu, jak ACCEPT, DROP i REJECT.
Sznurek: http://pl.wikibooks.org/wiki/Sieci_w_Linuksie/Netfilter
Failbana też można instalować dopiero, jak wszystko działa, a nie w czasie, kiedy jeszcze 3/4 usług nie działa w ogóle, albo ich nie widać w sieci.
EDIT2:
Już widzę te porty, twój serwer jest na liście PEERBLOCKa, załapał się też na blokadę u mnie. :D
Ostatnio edytowany przez Jacekalex (2013-09-29 21:21:19)
Offline
O rany...ide jutro do okulisty! ;/;) działa :) wielkie dizięki! :) Przeoczyłem tego REJECT wzrokiem.;)
Offline
Strony: 1