[Cialug] Procmail / Sendmail config pbm
Tim Perdue
cialug at perdue.net
Tue Apr 5 15:06:30 CDT 2011
On 4/5/2011 2:04 PM, Josh More wrote:
> Try troubleshooting by commenting out all lines after "-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT" and seeing if it will run the setup without issue. (Note that this may kill your SSH.)
>
> Alternatively, move this file to a backup and use system-config-securitylevel to create a new file from scratch. If that works, your system is fine with regards to iptables and you just have to get the rules right. Add them in one at a time and see which one causes the problem.
>
> Were it me, I would do the latter, as there are a lot of lines that are commented out that may either need that or are commented out for troubleshooting, so it is difficult to identify what it's supposed to be doing.
Yeah, it does accept that if you comment out the one rule. Strange thing
is, this file is copied from the original mailserver, running the same OS.
If you re-enable the one line below it gets this error:
Applying iptables firewall rules: iptables-restore: line 14 failed
[FAILED]
> # Firewall configuration written by system-config-securitylevel
> # Manual customization of this file is not recommended.
> *filter
> :INPUT ACCEPT [0:0]
> :FORWARD ACCEPT [0:0]
> :OUTPUT ACCEPT [0:0]
> :RH-Firewall-1-INPUT - [0:0]
> -A INPUT -j RH-Firewall-1-INPUT
> -A FORWARD -j RH-Firewall-1-INPUT
> -A RH-Firewall-1-INPUT -i lo -j ACCEPT
> -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> #home
> -A RH-Firewall-1-INPUT -i eth0 -p tcp --dport 22 -m iprange --src-range
> 67.41.107.185-67.41.107.185 -j ACCEPT
> COMMIT
More information about the Cialug
mailing list