This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to configuring Mail Relaying in Astaro ?

Hi:

I want to set up a MDaemon Mail Server behind a ASG with SMTP Proxy Option. But the mail's can't go out.

My actual config is:

Routing
Domain= [mydomain.com] Host List= [192.168.0.15]

Antivirus and Spam
Configuration Default

Relaying
Upstreams hosts= empty
Allowed users/groups= empty
Allowed hosts/networks = [192.168.0.15]

MDaemon DNS server [10.0.0.3] (My ASG Proxy), MDaemon resolved IP but can't send the mail (Winsock Error 10060: The connection timed out)

Any help please

Regards

This thread was automatically locked due to age.

0 William Warren over 13 years ago

you have to open a port for the outgoing mail traffic in your firewall.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 sopordit over 13 years ago in reply to William Warren

All the ports are open in my firewall (any)
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

MDaemon DNS server [10.0.0.3] (My ASG Proxy)

10.0.0.3 - where is that? Why a different subnet from the MDaemon server?

MDaemon resolved IP but can't send the mail (Winsock Error 10060: The connection timed out)

How do you know it resolved to the correct IP?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 sopordit over 13 years ago in reply to BAlfson

10.0.0.3 is my Astaro Proxy-Firewall it's behind a Pfsense with two NICS 192.168.0.1 and 10.0.0.2 like a DMZ

10.0.0.3 - where is that? Why a different subnet from the MDaemon server?

How do you know it resolved to the correct IP?

Because when I resolve the domain with nslookup this is the correct IP

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

If the Astaro is only to be a Mail Proxy, then you probably just want to activate just one interface and put the Astaro and MDaemon server into the 10.0.0.0/24 subnet. If you want to do other things with it, then please explain what functions you want it to perfomr.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 sopordit over 13 years ago in reply to BAlfson

I'm using the next configuration

Mail Server------------Pfsense----------Astaro(Proxy)---Astaro(Firewall)
192.168.0.15----192.168.0.1/10.0.0.2-----10.0.0.3-----10.0.0.1/Real IP

I wan to do a Mail Relay with Astaro using my existing mx record, what astaro configuration I have to change ? How I do it ???

Thanks again
Cancel
Vote Up 0 Vote Down

Cancel
0 maygyver over 13 years ago in reply to sopordit

Do you MASQ on the pfsense?
If not, do you have a route from Astaro back to the internal pfsense Network?

Sven

Astaro user since 2001 - Astaro/Sophos Partner since 2008
Cancel
Vote Up 0 Vote Down

Cancel
0 sopordit over 13 years ago in reply to maygyver

I have a route in astaro for all network 192.168.0.0/24 routing to 10.0.0.2 (pfsense)

Do you MASQ on the pfsense?
If not, do you have a route from Astaro back to the internal pfsense Network?

Sven
Cancel
Vote Up 0 Vote Down

Cancel
0 dswartz over 13 years ago

Question, having used pfsense before: is there any chance you have the WAN interface set to discard rfc1918 addresses?
Cancel
Vote Up 0 Vote Down

Cancel
0 sopordit over 13 years ago in reply to dswartz

Question, having used pfsense before: is there any chance you have the WAN interface set to discard rfc1918 addresses?

I having rfc 1918 checked, I uncheck this option and same result, Winsock error 1006 Connection timeout
Cancel
Vote Up 0 Vote Down

Cancel