tcpserver/tcprules ignoring my lines [SOLVED]

kic · n00b Joined: 04 Oct 2004 Posts: 4

Hi all,

I have a strange behaviour of tcprules on my system. I'd like to let some hosts in our network use my machine running qmail as an SMTP relay. What I did was editing /etc/tcprules.d/tcp.qmail-smtp so it contains

127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD=""
192.168.222.:allow,RELAYCLIENT="",RBLSMTPD=""
:allow

, then running "tcprules tcp.qmail-smtp.cdb tcp.qmail-smtp.cdb.temp < tcp.qmail-smtp"

- but 192.168.222.2 still gets the message

553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)

Restarting /etc/init.d/svscan does not help either.

Checking the rule by
tcprulescheck tcp.qmail-smtp.cdb 192.168.222.2
results in
rule :
allow connection

Now when I open my system WIDE for testing by editing /etc/tcprules.d/tcp.qmail-smtp so it contains

127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD=""
192.168.222.:allow,RELAYCLIENT="",RBLSMTPD=""
:allow,RELAYCLIENT="",RBLSMTPD=""

it's working perfectly - so it really reads my /etc/tcprules.d/tcp.qmail-smtp.cdb file. Also, tcprulescheck tcp.qmail-smtp.cdb 192.168.222.2 now results in
rule :
set environment variable RELAYCLIENT=
set environment variable RBLSMTPD=
allow connection

Why do my first two lines never match? I tried 192.168.222.2, 192.168.222., tried 127.0.0.1 - nothing. Is this a bug or am I doing something wrong? The file in general is working as we can see from the above.
I also reinstalled the package a few times (sys-apps/ucspi-tcp-0.88-r

, no change.

Please help me, I am running out of possible reasons...

Thanks a lot and greetings,
Torben

rhavens · Posted: Sat Jan 08, 2005 6:08 pm Post subject:

First, try this:

TCPREMOTEIP="192.168.222.2" tcprulescheck tcp.qmail-smtp.cdb

instead of:

tcprulescheck tcp.qmail-smtp.cdb 192.168.222.2

to see if the rules are working.

(I struggled with this one for a couple hours this morning)

kic · n00b Joined: 04 Oct 2004 Posts: 4

Hey, thank you very much.... how did you find out about THAT??? Now it's working using tcprulescheck.... although qmail still doesn't let me send via SMTP from that host... there must be another bug somewhere...

But thanks a LOT!!! So it was only a bug in the man page!

Greetings from Munich,
Torben

harlekyn · n00b Joined: 14 Jul 2003 Posts: 9

I ran into the same problem this morning. I upgraded ucspi-tcp a couple of days ago, and today I noticed that I wasn't able to send mail from localhost without authentification.

This worked before, and the tcprules where set correctly. After looking through the forums, I tried to recompile ucspi-tcp with "-ipv6", and that did the trick! Now tcpserver is honouring the tcprules again correctly.

Hope that helps

kic · n00b Joined: 04 Oct 2004 Posts: 4

Yes, it did it!!! :-)

Thanks for your help!!!

Torben