RE: CNAME, iptables and qmail
You need to open port 53 for tcp and udp. Another way you can look at it
is to log all packets you DENY (or REJECT) and see what your DNS is trying
to do.
-rishi
On Mon, 6 May 2002, Gary MacDougall wrote:
> Damn!! I hit send before editing this message. Sorry!
> Please read this instead of my previous message.
> ...
>
> I'm setting up a Deb (woody) box with qmail and iptables.
>
> I've got both installed, both seem be operating fine.
>
> Iptables is setup to no allow traffic other
> than 25, 110 and of course 22 (ssh).
>
> The problem I'm running into is iptables is causing
> e-mail to be NOT be sent (smtp) through the server and I get
> this message in the /var/logs/qmail/current file:
>
> @400000003cd6d8d41f84ee7c delivery 47: deferral:
> CNAME_lookup_failed_temporarily._(#4.4.3)/
>
> When I flush iptables, of course it works and I can send and
> receive fine (via SMTP and POP3)
>
> Anybody know what the deal is? I suspect some DNS ports need
> to be opened up, but I'm not sure...
>
> Any suggestions?
> Gary
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: