[Postfixbuch-users] Postfix hinter Firewall

[lars]

Moin,

> Ich kann NICHT so ganz dran glauben, daß ein nmap bei dir einen
> pffenen Port 25 meldet, ein "telnet postfixhost 25" aber nich nicht
> mal einen Connect.

was meinst du, weshalb ich so genervt bin - meine kollegin und ich können´s
auch nicht glauben...

>> ich mail mal die tcpdump (bzw. iptraf)-ausgabe rüber, wenn ich was
>> gefunden hab.

tcpdump: listening on eth0
11:04:32.619850 proxie.irgendwo.de.unix-status > rly-ic06.mx.aol.com.smtp: S
372298877:372298877(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:04:35.622169 proxie.irgendwo.de.unix-status > rly-ic06.mx.aol.com.smtp: S
372298877:372298877(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:04:38.695414 x.x.23.26.49473 > proxie.irgendwo.de.smtp: S
1851856768:1851856768(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp
2208932718 0> (DF) [tos 0x10]
11:04:38.695937 proxie.irgendwo.de.smtp > x.x.23.26.49473: S
2507322600:2507322600(0) ack 1851856769 win 64240 <mss 1460,nop,wscale
0,nop,nop,timestamp 0 0> (DF)
11:04:38.696178 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 1 win 33304
<nop,nop,timestamp 2208932718 0> (DF) [tos 0x10]
11:04:38.696642 proxie.irgendwo.de.smtp > x.x.23.26.49473: P 1:122(121) ack
1 win 64240 <nop,nop,timestamp 54977 2208932718> (DF)
11:04:38.743811 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 122 win
33304 <nop,nop,timestamp 2208932718 54977> (DF) [tos 0x10]
11:04:41.630781 proxie.irgendwo.de.unix-status > rly-ic06.mx.aol.com.smtp: S
372298877:372298877(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:04:49.043579 x.x.23.26.49473 > proxie.irgendwo.de.smtp: P 1:25(24) ack
122 win 33304 <nop,nop,timestamp 2208932739 54977> (DF) [tos 0x10]
11:04:49.043978 proxie.irgendwo.de.smtp > x.x.23.26.49473: P 122:169(47) ack
25 win 64216 <nop,nop,timestamp 55080 2208932739> (DF)
11:04:49.145991 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 169 win
33304 <nop,nop,timestamp 2208932739 55080> (DF) [tos 0x10]
11:04:54.651284 proxie.irgendwo.de.dxadmind > rly-ic06.mx.aol.com.smtp: S
377850891:377850891(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:04:57.404468 x.x.23.26.49473 > proxie.irgendwo.de.smtp: P 25:55(30) ack
169 win 33304 <nop,nop,timestamp 2208932755 55080> (DF) [tos 0x10]
11:04:57.405055 proxie.irgendwo.de.smtp > x.x.23.26.49473: P 169:211(42) ack
55 win 64186 <nop,nop,timestamp 55164 2208932755> (DF)
11:04:57.547785 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 211 win
33304 <nop,nop,timestamp 2208932756 55164> (DF) [tos 0x10]
11:04:57.653683 proxie.irgendwo.de.dxadmind > rly-ic06.mx.aol.com.smtp: S
377850891:377850891(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:03.662271 proxie.irgendwo.de.dxadmind > rly-ic06.mx.aol.com.smtp: S
377850891:377850891(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:16.682823 proxie.irgendwo.de.simp-all > rly-ic06.mx.aol.com.smtp: S
383397365:383397365(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:19.685186 proxie.irgendwo.de.simp-all > rly-ic06.mx.aol.com.smtp: S
383397365:383397365(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:25.693777 proxie.irgendwo.de.simp-all > rly-ic06.mx.aol.com.smtp: S
383397365:383397365(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:38.714300 proxie.irgendwo.de.nasmanager > rly-ic06.mx.aol.com.smtp: S
388954097:388954097(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:41.445024 x.x.23.26.49473 > proxie.irgendwo.de.smtp: P 55:94(39) ack
211 win 33304 <nop,nop,timestamp 2208932843 55164> (DF) [tos 0x10]
11:05:41.445507 proxie.irgendwo.de.smtp > x.x.23.26.49473: P 211:252(41) ack
94 win 64147 <nop,nop,timestamp 55604 2208932843> (DF)
11:05:41.556673 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 252 win
33304 <nop,nop,timestamp 2208932844 55604> (DF) [tos 0x10]
11:05:41.716654 proxie.irgendwo.de.nasmanager > rly-ic06.mx.aol.com.smtp: S
388954097:388954097(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:44.947324 x.x.23.26.49473 > proxie.irgendwo.de.smtp: P 94:100(6) ack
252 win 33304 <nop,nop,timestamp 2208932850 55604> (DF) [tos 0x10]
11:05:44.948377 proxie.irgendwo.de.smtp > x.x.23.26.49473: P 252:298(46) ack
100 win 64141 <nop,nop,timestamp 55639 2208932850> (DF)
11:05:44.957512 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 298 win
33304 <nop,nop,timestamp 2208932850 55639> (DF) [tos 0x10]
11:05:47.725238 proxie.irgendwo.de.nasmanager > rly-ic06.mx.aol.com.smtp: S
388954097:388954097(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
11:05:49.466140 x.x.23.26.49473 > proxie.irgendwo.de.smtp: P 100:115(15) ack
298 win 33304 <nop,nop,timestamp 2208932859 55639> (DF) [tos 0x10]
11:05:49.576517 proxie.irgendwo.de.smtp > x.x.23.26.49473: . ack 115 win
64126 <nop,nop,timestamp 55686 2208932859> (DF)
11:05:50.090483 x.x.23.26.49473 > proxie.irgendwo.de.smtp: P 115:118(3) ack
298 win 33304 <nop,nop,timestamp 2208932861 55686> (DF) [tos 0x10]
11:05:50.097934 proxie.irgendwo.de.smtp > x.x.23.26.49473: P 298:335(37) ack
118 win 64123 <nop,nop,timestamp 55690 2208932861> (DF)
11:05:50.158741 x.x.23.26.49473 > proxie.irgendwo.de.smtp: . ack 335 win
33304 <nop,nop,timestamp 2208932861 55690> (DF) [tos 0x10]

2448 packets received by filter
0 packets dropped by kernel

Das war die Ausgabe des telnet mailser-intern.de 25
und das versenden einer mail an den Exchange - ist angekommen!
Beim Postfix - Fehlanzeige.....

der rest kommt gleich (schwitz...)