Topic: mail stuck in mail que / ports 25 and 80 filtered?

[guest]

Hi,
I have three SME Servers that have the following problem.
As of June 17 these servers have several messages stuck in remote mail que.
Have released and renewed IP's etc and that does not appear to be the problem.
I have tapeware on these servers, and stopped recieving the mail logs of backup stats, this is what caused further investigation.
Tapeware is working just fine, but the web server and mail server are not working.
I can VPN into the servers, and run nmap locally to assure port 25 and 80 are open.
If I nmap the IP remotely it says All 80 scanned ports on XXX.XXX.XXX.XXX) are: filtered.
We called the ISP and they say they are not filtering, yet if you go to dnsreport.com, it can not connect to port 25.
When I connect to the server VIA VPN, and log in to webmail I can send to an external address, no errors, they never get the mail.
Any help greatly appreciated.
Servers are 6.0, clam, other than that plain jane.
I have tried service restart clamd, and
service restart qmail but know that the services must be working, just not externally.

[smeghead]

smtpfront-qmail is the service your after:

service smtpfront-qmail status; this is the service on port 25, if its down then its ya prob

check the matching log file to see if you have a problem stopping it from starting; also check messages log for clues.

When clamav and/or spamassassin is installed they insert themselves into the mail sequence and if these progs have a problem then they may be the root cause.

I have also seen a permission prob on the qmail-queue file in /var/qmail/bin that stops the mail getting in or outta a server (it needs SetUID - chmod 4711, without it ya toast)

Grab a copy of queue-repair.py from:

http://www.qcc.ca/~charlesc/software/queue_repair/

It will verify your qmail setup and repair probs if any (if you choose)

[guest]

service smtpfront-qmail status shows it is up.
I do not believe the problem is the server.
As I said when I VPN to the server, and run nmap against eth1 (external IP) it shows 25, and 80 are open.
When I nmap that public ip from outside the vpn it says the ports are there but filtered.
Internal e-mails work ok.

[smeghead]

at the risk of asking the obvious, do you have a router on the external interface that may be blocking these ports?

If not it might be useful to hang this machine off another internet connection and see if mail works (at partially)

[smeghead]

.. perhaps try another connection using another ISP if a friend is willing to help out ..

[guest]

Found it,
Telus (hi-speed) are blocking ports 25 and 80 on "non-server ADSL" packages.
Customers have to upgrade.
Thanks,

[guest]

Found it,
Telus (hi-speed) are blocking ports 25 and 80 on "non-server ADSL" packages.
Customers have to upgrade.
Thanks,