Re: Re[2]: Problem with Port forwarding

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tuesday 06 April 2004 8:41 am, Oleg Savostyanov wrote:

> Hello Antony,
>
> Thank you for your answer.
>
> Now the connection does not logged
> I can see the thirst packet on mail server,
> but it is timed out
>
> telnet X.X.X.X 25
> Trying X.X.X.X...
> telnet: Unable to connect to remote host: Connection timed out
>
> This is the log from mail server:
> Tue 2004-04-06 10:31:42: [804:52:2] Accepting SMTP connection from [Y.Y.Y.Y
> : 33222]

Well, the fact that you see this in your mail log suggests to me that the TCP 
handshake SYN - SYN/ACK - ACK has been completed, and the connection is now 
available for data transfer.

> Tue 2004-04-06 10:31:42: [804:52:2] Socket connection closed by the other
> side (how rude!)

You're not running TCPwrappers on the mail server or something, are you, and 
it needs to get a response from the client before maintaining the connection?

> Tue 2004-04-06 10:31:42: [804:52:2] Winsock Error 10053 Software caused a
> connection abort.
> Tue 2004-04-06 10:31:42: [804:52:2] Unexpected socket closure

What do you see in the packet / byte counters from "iptables -L -nvx; iptables 
-L -t nat -nvx" when you try to make a connection?   Do you see packets in 
the PREROUTING DNAT rule, the FORWARD rule towards the mail server, and the 
FORWARD rule for the replies?

Regards,

Antony.

-- 
Ramdisk is not an installation procedure.

                                                     Please reply to the list;
                                                           please don't CC me.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux