I want to open smtp port in my firewall for accepting email from
Internet.

- I use Postfix for my MTA

in Postfix's main.cf:

inet_interfaces = all


- in my pf.conf:

pass in quick on $ExtIf inet proto tcp from any to any port 25 keep
state
pass in on $ExtIf inet proto tcp from any to any port 25


But still email from my external interface (ne3) is refused. I tried
with telnet to port 25, but no success. I tested with web-based nmap
service and found that port 25 is not open.

Can anybody give me a suggestion what I must do?

--
ia

Eirik Seim <eirik@mi.uib.no> wrote in message news:<slrnbgp1h2.h11.eirik@kain.mi.uib.no>...
> I would recommend only using the firewall to forward/redirect the
> connections to a DMZ, not running the MTA on the firewall itself.
>

Thanks Eirik,

I have tried all your commands you suggested. Actually it is no
problem using that mail server for sending email from inside firewall
-- I have used for a long time. So, Postfix is well done listening in
localhost and inside interface.

Actually, I have a little indication -- as you informed -- that
perhaps my ISP blocks that port for some reasons.

--
ia

iamal@home.nl (Ikhlasul Amal) wrote in message
> Actually, I have a little indication -- as you informed -- that
> perhaps my ISP blocks that port for some reasons.

unfortunately, this appears to be a growing trend among ISPs...trying
to prevent users from operating internet-based services. Many, in
fact, see it as a threat to their business -- i just see it as a bunch
of crap.

have you had the same difficulties with other ports, such as 80 or 443?

--
ryanc

ryanc@tfb.com (Ryan Corder) wrote in message news:<36251db2.0307100751.69f2447a@posting.google. com>...
> unfortunately, this appears to be a growing trend among ISPs...trying
> to prevent users from operating internet-based services. Many, in
> fact, see it as a threat to their business -- i just see it as a bunch
> of crap.
>
> have you had the same difficulties with other ports, such as 80 or 443?

Months ago I ever read my ISP's newsletter about the possibilities of
spam via port 25, maybe this is one reason for blocking port 25. Port
80 is open and I use for my Web service. I set up a website for
personal and our non-profit organization; to be fair, I do not allow
any comercial usage -- direct or indirect -- exposed in our website.

--
ia