RE: Problem with sendmail server behind firewall...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a sendmail or a network setup problem not really a Netfilter problem.. unless it's really badly done rules.

What does a mailq show or even the /var/log/maillog? Have you got the DNS and default gateway correct..etc.etc..

Also, this is probably something that should be taken off the list if you establish it's definately sendmail problem.


-----Original Message-----
From: Pradeep Bhomia [mailto:pradeepbhomia@xxxxxxxxxxxxxx]
Sent: Friday, September 05, 2003 4:40 PM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Problem with sendmail server behind firewall...


We are facing problem with the sendmail server when it is put behind the 
iptables firewall.
The setup is:
Sendmail 8.12.9
IPTables 1.2.7
Shorewall 1.3.14

Earlier Sendmail server was connected directly to the Internet with a valid 
Internet IP. At that time the number of sendmail processes never exceeded 10 
at any given poing of time. (Checked with ps -ef | grep sendmail)
Now we have implemented the Mandrake Linux 9.1 based firewall using IPTables 
and Shorewall. NATting was configured on the firewall. After doing this, we 
have observed that the number of sendmail process keeps on increasing and 
goes upto nearly 170 processes. It seems that the problem is with the 
incoming message requests. It process remains open for nearly 2 hours. This 
is observed for random connections or some particular sites.
As such sendmail server is receiving and sending mails without any problem to 
the users.
After I remove the firewall and put the server directly on the internet the 
sendmail processes remain at less than 10.

I have been working on this problem for last two days without success. I 
cannot understand whether the problem is with the implementation of firewall 
(NATting) or with sendmail server. I have checked the firewall with only 
NATting (removed all the rules)

Kindly help.

Thanks and regards, 
 
Pradeep Bhomia 




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux