OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Unable to accept connection from client on the same subnet

From: Andre Costa (costatecgraf.puc-rio.br)
Date: Mon Jul 12 2004 - 06:26:20 CDT


Hi,

this should be simple, but I am stuck: our network has a primary MX, but
my box has a working postfix because I need to send some messages from
it (I have a local installation of GForge [www.gforge.org]). I would
like to configure my local postfix to accept incoming connections from
this very same MX server, but I can't make it work.

After reading postfix docs, I configured postfix like this:

# postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
inet_interfaces = localhost
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain
mydomain = tecgraf.puc-rio.br
myhostname = dali.tecgraf.puc-rio.br
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.0.16/README_FILES
relayhost = smtp.tecgraf.puc-rio.br
sample_directory = /usr/share/doc/postfix-2.0.16/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_client_restrictions = permit_mynetworks reject_unknown_client
smtpd_helo_required = no
unknown_local_recipient_reject_code = 450
virtual_alias_maps = hash:/etc/postfix/virtual

I also configured iptables to accept incoming connections from
smtp.tecgraf.puc-rio to local port 25. However, connections are being
rejected (not by iptables, results are the same if I turn it off):

Executing from 139.82.85.1:
# mail -v costadali.tecgraf.puc-rio.br
[...]
costadali.tecgraf.puc-rio.br... Connecting to dali.tecgraf.puc-rio.br.
via esmtp...
costadali.tecgraf.puc-rio.br... Deferred: Connection refused by
dali.tecgraf.puc-rio.br.

Weird thing is that nothing appears on /var/log/maillog...

It seems I a overlooking something pretty obvious, but I can't see what
it is. Any advice from the gurus will be most appreciated ;)

TIA

Andre

--
Andre Oliveira da Costa
(costatecgraf.puc-rio.br)