On Fri, Aug 03, 2012 at 10:19:07AM +0200, BBS Technik wrote:
> > # allow to connect FROM your ubuntu
> Port 25 (SMTP) should also be allowed (confirmation mail, ... ) . 
No, it should not. Sending mail via smtp is connection initiated by
Ubuntu. It does not come from out side, so it is handle by following
rules:
- SYN initiating connection to SMTP server:
> > iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
- any packet belong to connection initiated by SYN:
> > iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-- 
Jakub Skory, <kuba(at)ukw(dot)edu(dot)pl>
System Operator
IT Center:
_______________________________________________________________________
tel:             +48 52 3257 649,  +48 52 3257 647
fax:             +48 52 3257 646,  +48 52 3257 647
working hours:    08a.m. - 04p.m.
mail:             di(at)ukw(dot)edu(dot)pl
web:              http://di.ukw.edu.pl/
postal address:   M. Kopernika 1 (room 8/9), 85-074, Bydgoszcz.
_______________________________________________________________________
Kazimierz Wielki University,
J. K. Chodkiewicza 30,
85-064, Bydgoszcz, Poland.
_______________________________________________________________________

Attachment: pgpVcFsDl8EUx.pgp
Description: PGP signature

www(dot)ukw(dot)edu(dot)pl

MID: 396430
10:25:01 08/03/12

Reply via email to