Great Circle Associates Firewalls
(June 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Brian Sandlin sendmail not delivering to you (fwd)
From: tlr1 @ esygvl . com
Date: Fri, 30 Jun 1995 10:37:17 -0500 (CDT)
To: firewalls @ GreatCircle . COM

Thanks to those who suggested fixes for my sendmail problem.  What I have 
done so far is to allow icmp from anywhere to my mail server, based on 
one of your responses indicating that some mailers attempt to ping a host 
before sending mail to it.  I do allow connections from anywhere to port 
25 on our mail server, which is an HP 755 running HP-UX 9.05 with the 
latest sendmail patch from HP.  However, this has not fixed the problem 
of certain sites not being able to send mail to esygvl.com.  Please take 
a look at the msg below and tell me if I need to allow connections to 
ports above 5000 (I didn't realize they went up to 37755!).  Am I reading 
the msg wrong?  We were under the impression that ports above 5000 were 
dangerous, so we disallowed them.

Terry L. Robison   |   I struggled no more, but the agony of my soul
Engineer           |   found vent in one loud, long, and final scream
E-Systems, Inc.    |   of despair.  I felt that I tottered upon the brink...
Greenville TX      |   -= from "The Pit and the Pendulum" =-
tlr1 @
 esygvl .
 com    |               -= by E. A. Poe =-

---------- Forwarded message ----------
Date: Fri Jun 30 09:52:00 1995
From: Terry Robison <tlr1 @
 chop .
 isca .
 uiowa .
 edu>
To: tlr1 @
 reo .
 icf .
 esygvl .
 com
Cc: blj1 @
 reo .
 icf .
 esygvl .
 com, lbj1 @
 reo .
 icf .
 esygvl .
 com
Subject: Brian Sandlin sendmail not delivering to you

Am I reading this right?  Why is the port number not 25?

Forwarded Information:
>From: Brian Sandlin (bsandlin @
 bermac .
 com) on Wed, 28 Jun 1995 13:51:38 -0500
To: tlr1 @
 chop .
 isca .
 uiowa .
 edu
Subject: sendmail not delivering to you

Hey,

Sorry if you're being swamped with information, but here is what I
am seeing:

I tried to send you some mail, while running a packet sniffer on the
wire, and got basically this:  I send a packet to the smtp port at
reo.icf.esygvl.com, and get no response.  I send another packet every
3-6 seconds and never get a response...  I saw no evidence of a ping
attempt.

 10   0.21973      twinkie -> reo.icf.esygvl.com SMTP C port=37755 
 11   2.85049      twinkie -> reo.icf.esygvl.com SMTP C port=37755 
 12   5.72021      twinkie -> reo.icf.esygvl.com SMTP C port=37755 

Basically, the message will sit in queue for a few days and
then bounce.  

NAA07424      138 Wed Jun 28 13:19 bsandlin
                 (Deferred: Connection timed out during initial connection wit)
                                   tlr1 @
 esygvl .
 com

Maybe there is a DNS problem:  here is the record I get for
esygvl.com and reo.icf.esygvl.com:

# nslookup
> set type=any
> esygvl.com
Server:  ns2.psi.net
Address:  38.8.50.2
 
esygvl.com      nameserver = ns.psi.net
esygvl.com      nameserver = ns2.psi.net
esygvl.com      nameserver = reo.icf.esygvl.com
esygvl.com
        origin = reo.icf.esygvl.com
        mail addr = postmaster.esygvl.com
        serial = 199494209
        refresh = 300 (5 mins)
        retry   = 7200 (2 hours)
        expire  = 604800 (7 days)
        minimum ttl = 86400 (1 day)
esygvl.com      internet address = 199.249.247.4
esygvl.com      preference = 10, mail exchanger = reo.icf.esygvl.com
esygvl.com      nameserver = ns.psi.net
esygvl.com      nameserver = ns2.psi.net
esygvl.com      nameserver = reo.icf.esygvl.com
ns.psi.net      internet address = 192.33.4.10
ns2.psi.net     internet address = 38.8.50.2
reo.icf.esygvl.com      internet address = 199.249.247.4


> reo.icf.esygvl.com
Server:  ns2.psi.net
Address:  38.8.50.2
 
Non-authoritative answer:
reo.icf.esygvl.com      internet address = 199.249.247.4
 
Authoritative answers can be found from:
icf.esygvl.com  nameserver = reo.icf.esygvl.com
icf.esygvl.com  nameserver = ns.psi.net
icf.esygvl.com  nameserver = ns2.psi.net
reo.icf.esygvl.com      internet address = 199.249.247.4
ns.psi.net      internet address = 192.33.4.10
ns2.psi.net     internet address = 38.8.50.2
> 

-b-

I'm sorry to see you having trouble and would be glad to help out
any way I can.   

Brian Sandlin (bsandlin @
 bermac .
 com, postmaster @
 bermac .
 com)  
(214) 255-9007 x110




Indexed By Date Previous: Re: Controlling ftp file transfers
From: Ted Doty <ted @ kgbvax . network . com>
Next: Re: where to get Firewalls Heresies article
From: Ted Doty <ted @ kgbvax . network . com>
Indexed By Thread Previous: Re: where to get Firewalls Heresies article
From: Ted Doty <ted @ kgbvax . network . com>
Next: Announce: LSLI PORTUS 2.1 tutorial
From: fletch @ gw . lsli . com

Google
 
Search Internet Search www.greatcircle.com