Odd ipfilter/postfix interaction

This is a discussion on Odd ipfilter/postfix interaction within the IPFilter forums, part of the System Security and Security Related category; All: Maybe someone who is more of a networking guru than I am can figure out how to solve this ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-17-2005
David Bogen
 
Posts: n/a
Default Odd ipfilter/postfix interaction

All:

Maybe someone who is more of a networking guru than I am can figure out
how to solve this problem.

I've got a FreeBSD 4.11-STABLE system that is attached to the Internot
via DSL. Generally, that all works just like one might expect it would.

Recently, I switched to ipfilter 4.1.5 from some relatively recent
release in the 3-series of ipfilter.

Shortly after switching releases of ipfilter, I noticed that e-mail
messages with attachments (sized approximately 116K) were not able to be
relayed via postfix (I'm running 2.1.5, if anyone is interested) off the
server. Messages would queue up on the server, and they could never
leave. The reason the messages were deferred was always "lost
connection with fake-smtp.server.com [1.1.1.1] while sending message body".

So, I tried changing the server to which I relay messages. That didn't
make any difference.

Then, I tried a different mail client for a couple of test messages, on
the off chance that the MUA was constructing malformed messages. That
didn't make a difference.

Then, I tried looking at MTU issues since that is what Googling the
problem seemed to indicate might help. I tried mucking around with MTU
settings in /etc/ppp/ppp.conf (since I use PPPoE to connect to my DSL
provider). No matter how (reasonably) low I set the MTU, the messages
would not go through.

Finally, with the same set of messages sitting in the queue that had
been failing, failing, and failing again, I dropped ipfilter and flushed
the postfix queue one more time.

Blink and you missed it. The messages were gone.

If anyone wants to try diagnosing this problem and is interested in
looking at a tcpdump of a failed message, let me know and I'll make it
available to you.

David Bogen
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:50 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0