[7.460][QUESTION][ANSWERED] Firewall prevents mail download via PPTP

Hi Friends !

i am trying to download mail from pptp i am able to browse with pptp but when i try to download mail from pptp firewall block

11:19:51 Default DROP UDP 10.242.1.2 : 49152 → 202.54.1.66 : 53

len=89 ttl=254 tos=0x00 srcmac=00:60:08:9b:a5:79 dstmac=00:00:00:00:00:00 11:19:58 Default DROP UDP 10.242.1.2 54550
→
202.54.1.66 : 53

len=69 ttl=127 tos=0x00 srcmac=00:60:08:9b:a5:79 dstmac=00:00:00:00:00:00

traffic then i have add pf rule to download mail do i really require pf rule to download mail /when i am able to browse and port 53/dns block

11:22:12 Packetfilter rule #9 UDP
10.242.1.2 : 57445
→
202.54.1.66 : 53

len=67 ttl=127 tos=0x00 srcmac=00:60:08:9b:a5:79 dstmac=00:00:00:00:00:00

using Thunderbird/mozilla mail client

Remote Access >>advanced dns entry added
do i have to add pptp in dns server

Thanks

0 Astaro Beta Bot over 16 years ago

Astaro Beta Report
--------------------------------
Version: 7.460
Type: QUESTION
State: ANSWERED
Reporter: utm_kid
Contributor: 
MantisID: 
--------------------------------

0 ee-tra over 16 years ago in reply to Astaro Beta Bot

We don't offer automatic packetfilter rules for the pushed DNS host.
So you have to add them manually.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 16 years ago in reply to ee-tra

We don't offer automatic packetfilter rules for the pushed DNS host.
So you have to add them manually.

Ok !

Thanks

Can u please tell me for knowledge what is pushed DNS host ?

Thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 ee-tra over 16 years ago

The nameserver you configured under Advanced Client Options are provided from
the ASG to the client. The is meant with 'pushed'.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 16 years ago in reply to ee-tra

The nameserver you configured under Advanced Client Options are provided from
the ASG to the client. The is meant with 'pushed'.

Still i am not properly understood ,when port 53 is require

when i am able to browse with dns setting why it should give error with port53/dns ?

ok i am trying same thing on microsoft outlook now it blocking port 18:18:34 Default DROP TCP
10.242.1.2 : 2194
→
66.118.157.156 : 110

[SYN] len=48 ttl=127 tos=0x00 srcmac=00:60:08:9b:a5:79 dstmac=00:00:00:00:00:00
18:18:37 Default DROP TCP
10.242.1.2 : 2194
→
66.118.157.156 : 110

[SYN] len=48 ttl=127 tos=0x00 srcmac=00:60:08:9b:a5:79 dstmac=00:00:00:00:00:00
18:18:43 Default DROP TCP
10.242.1.2 : 2194
→
66.118.157.156 : 110

[SYN] len=48 ttl=127 tos=0x00 srcmac=00:60:08:9b:a5:79 dstmac=00:00:00:00:00:00

can u please explain /if possible (yes sir i know u r busy still please spare some time for me )
Thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 ee-tra over 16 years ago in reply to utm_kid

>>> Still i am not properly understood ,when port 53 is require

As long as there's no yet another rule allowing port 53 to the wanted host, allowing traffic including the pptp address range.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel