[Cialug] Procmail / Sendmail config pbm

Tim Perdue cialug at perdue.net
Tue Apr 5 15:06:30 CDT 2011


On 4/5/2011 2:04 PM, Josh More wrote:
> Try troubleshooting by commenting out all lines after "-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT" and seeing if it will run the setup without issue.  (Note that this may kill your SSH.)
>
> Alternatively, move this file to a backup and use system-config-securitylevel to create a new file from scratch.  If that works, your system is fine with regards to iptables and you just have to get the rules right.  Add them in one at a time and see which one causes the problem.
>
> Were it me, I would do the latter, as there are a lot of lines that are commented out that may either need that or are commented out for troubleshooting, so it is difficult to identify what it's supposed to be doing.

Yeah, it does accept that if you comment out the one rule. Strange thing 
is, this file is copied from the original mailserver, running the same OS.

If you re-enable the one line below it gets this error:

Applying iptables firewall rules: iptables-restore: line 14 failed
                                                            [FAILED]


> # Firewall configuration written by system-config-securitylevel
> # Manual customization of this file is not recommended.
> *filter
> :INPUT   ACCEPT [0:0]
> :FORWARD ACCEPT [0:0]
> :OUTPUT ACCEPT [0:0]
> :RH-Firewall-1-INPUT - [0:0]
> -A INPUT -j RH-Firewall-1-INPUT
> -A FORWARD -j RH-Firewall-1-INPUT
> -A RH-Firewall-1-INPUT -i lo -j ACCEPT
> -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> #home
> -A RH-Firewall-1-INPUT -i eth0 -p tcp --dport 22 -m iprange --src-range
> 67.41.107.185-67.41.107.185 -j ACCEPT
> COMMIT



More information about the Cialug mailing list