[ previous ] [ next ] [ threads ]
 
 From:  "Vadim Pushkin" <wiskbroom at hotmail dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Unable To Determine Why Outbound SMTP Does Not Work
 Date:  Sat, 21 Oct 2006 00:58:10 +0000
Hello;

I've been using monowall for my home for quite some time, now I wish to use 
it for bigger things but I am baffled as to why I am unable to get outbound 
smtp from inside my LAN.  I have very simple rules and setup.

My internal network is 192.168.1.0, my m0n0 box is 192.168.1.1

Also, how do I clear my nat cache?

Thanks in advance,

.vp

$ ipfstat -io
pass out quick on lo0 from any to any
pass out quick on sis1 proto udp from 192.168.1.1/32 port = 67 to any port = 
68
pass out quick on sis0 proto udp from any port = 68 to any port = 67
pass out quick on sis1 from any to any keep state
pass out quick on sis0 from any to any keep state
block out log quick from any to any
pass in quick on lo0 from any to any
block in log quick from any to any with short
block in log quick from any to any with ipopt
pass in quick on sis1 proto udp from any port = 68 to 255.255.255.255/32 
port = 67
pass in quick on sis1 proto udp from any port = 68 to 192.168.1.1/32 port = 
67
block in log quick on sis0 from 192.168.1.0/24 to any
block in log quick on sis0 proto udp from any port = 67 to 192.168.1.0/24 
port = 68
pass in quick on sis0 proto udp from any port = 67 to any port = 68
block in log quick on sis1 from !192.168.1.0/24 to any
block in log quick on sis0 from 10.0.0.0/8 to any
block in log quick on sis0 from 127.0.0.0/8 to any
block in log quick on sis0 from 172.16.0.0/12 to any
block in log quick on sis0 from 192.168.0.0/16 to any
skip 1 in proto tcp from any to any flags S/FSRA
block in log quick proto tcp from any to any
block in log quick on sis1 from any to any head 100
pass in quick from 192.168.1.0/24 to 192.168.1.1/32 keep state group 100
pass in quick from any to any keep state keep frags group 100
block in log quick on sis0 from any to any head 200
pass in quick proto gre from any to 192.168.1.20/32 keep state group 200
pass in quick proto tcp from any to 192.168.1.20/32 port = 1723 keep state 
group 200
pass in quick proto tcp from 12.226.174.109/32 to 192.168.1.58/32 port = 22 
keep state group 200
pass in quick proto tcp from 83.62.45.121/32 to 192.168.1.58/32 port = 22 
keep state group 200
pass in quick proto tcp from any to 192.168.1.58/32 port = 443 keep state 
group 200
pass in quick proto tcp from 56.10.191.3/32 to 192.168.1.58/32 port = 25 
keep state group 200
block in log quick from any to any