[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Re: pmfirewall , IPCHAINS, CDONTS and mail forwarding
- Subject: [cobalt-security] Re: pmfirewall , IPCHAINS, CDONTS and mail forwarding
- From: "Jonathan Mergy" <mergy@xxxxxxxxx>
- Date: Mon, 22 Apr 2002 18:25:50 -0700
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
All IPChains is doing is allowing the smtp port to be accepted. Any type
of forwarding is removed from IPchains (and the tool you used to generate
its configs - pmfilter). pmfilter isn't a daemon or anything - so I would
be hesitant to blame it on that.
I can send you my configs so you can see another one and do some
comparisons or something if you want.
check the maillogs?
>I installed pmfirewall with this:
>
>$IPCHAINS -A input -p tcp -s $REMOTENET -d $OUTERNET 25 -j ACCEPT
>
>Several websites use CDONTS and the mail is forwarded to accounts off
>the RAQ
>
>When pmfirewall is running, the mail won't forward
>
>Any clues?
>
>Thanks,
>
>Sean
-------------------
jonathan mergy
mergy@xxxxxxxxx