problema server mail ubuntu

[bianc30]

Salve a tutti inazitutto vorrei ringraziare tutto lo staff per le indicazioni che ho trovato e che mi sono state molto utili per la programmazione di un cisco 877 il problema sta nel fatto che funziona tutto,
premetto che ho un indirizzo fisso telecom e nel vecchio router (alice) avevo e tuttora ho un server mail ubuntu il fatto e che ne invio ne ricevo posta.
Ho aperto la porta sul cisco su ip-lan-server ma non va
Allora ho preso il server e lo portato sotto altra adsl no telecom (adsl-wifi con ip statico)
aperto porta e tutto va.
Suppongo sia un problema di conf sul cisco.
Ho provato a dare unaocchiata in giro per il sito ma non ho trovato qualche indicazione che mi potrebbe essere utili al caso.
questa e la conf.


version 12.4
service nagle
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco877
!
boot-start-marker
boot-end-marker
!
logging exception 100000
logging count
logging userinfo
logging queue-limit 10000
logging buffered 4096
logging console critical
!
no aaa new-model
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.156 192.168.1.254
ip dhcp excluded-address 192.168.1.1 192.168.1.101
!
ip dhcp pool client
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 151.99.125.1 151.99.0.100
lease 0 2
!
!
ip port-map imap port tcp 143 list 5
ip port-map smtp port tcp 25 list 3
ip port-map pop3 port tcp 110 list 4
ip inspect log drop-pkt
ip inspect max-incomplete low 300
ip inspect max-incomplete high 400
ip inspect one-minute low 300
ip inspect hashtable-size 2048
ip inspect tcp synwait-time 20
ip inspect tcp max-incomplete host 300 block-time 60
ip inspect name IDS ftp
no ip bootp server
ip domain name interbusiness.it
ip name-server 151.99.125.2

login block-for 1 attempts 3 within 30
login on-failure
login on-success

archive
log config
hidekeys
!
!
ip tcp selective-ack
ip tcp window-size 2144
ip tcp synwait-time 10
!
!
!
interface ATM0
description Interfaccia ATM0 - Connessione ADSL
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
no ip split-horizon
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.1 point-to-point
ip virtual-reassembly
pvc 8/35
oam-pvc manage
pppoe-client dial-pool-number 2
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description CONNESSIONE LAN ***
ip address 192.168.1.1 255.255.255.0
ip accounting output-packets
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1412
no ip mroute-cache
hold-queue 100 out

interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 2
dialer-group 1
ppp authentication chap pap callin
ppp ipcp dns request
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.157 110 interface Dialer0 25
ip nat inside source static tcp 192.168.1.157 80 interface Dialer0 80

!
control-plane
!
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 30 in
login tacacs
!
scheduler max-task-time 5000
no scheduler allocate
end

Vi ringrazio anticipatamente per aiuto che potrete darmi.
Grazie

[bianc30]

Salve non ce proprio nessuno che può darmi una mano che sto impazzendo.
Aggiungo che spostando il server sia su linea telecom con router alice che su altra gestore adsl.wifi aprendo porta 80 il server comunica perfettamente.
La stessa porta la apro sul cisco 877, sopra al server mail ho squiremmail e dall esterno entro nel server con nome e pass ma ne invio ne ricevo
Vi ringrazio anticipatamente

[paolomat75]

Ciao,
non ho letto bene tutto il messaggio, ma mi è capitato l'occhio su

Codice: Seleziona tutto

ip nat inside source static tcp 192.168.1.157 110 interface Dialer0 25

è voluto? Hai mischiato la porta POP3 con SMTP.

Paolo

[bianc30]

Grazie per avermi risposto.
era voluto ho fatto alcune prove poi lo tirato via e ho lasciato aperto solo porta 80 su ip locale (server mail).
quando sposto il server e lo metto su da una altra parte aprendo porta 80 funziano benissimo con il cisco invece la posta non va .
Sapresti aiutarmi a trovare una soluzione.
sul server mail ce postfix+dovecot+squirremail.
grazie

[paolomat75]

Beh se i servizi devono essere accessibili dal esterno, devi mettere tutte le porte che ti servono (25, 110, 143, ecc).

Paolo

[bianc30]

Intanto grazie
sempre verso ip locale(servermail) giusto

[paolomat75]

Si. Ma dipende da che servizi vuoi far accedere. Non è obbligatorio che li metti tutti.

Paolo

[bianc30]

Ciao ti posso mandare conf
sul server mail utilizza pop3 e smtp e imap quindi porta 25 110 e 143 io le ho aperte

Building configuration...
[OK]
cisco877#show config
Using 3480 out of 131072 bytes
!
version 12.4
service nagle
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco877
!
boot-start-marker
boot-end-marker
!
logging exception 100000
logging count
logging userinfo
logging queue-limit 10000
logging buffered 4096
logging console critical
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-2744445731
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2744445731
revocation-check none
rsakeypair TP-self-signed-2744445731
!
!
crypto pki certificate chain TP-self-signed-2744445731
certificate self-signed 01 nvram:IOS-Self-Sig#23.cer
dot11 syslog
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.156 192.168.1.254
ip dhcp excluded-address 192.168.1.1 192.168.1.101
!
ip dhcp pool client
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 151.99.125.1 151.99.0.100
lease 0 2
!
!
ip inspect log drop-pkt
ip inspect max-incomplete low 300
ip inspect max-incomplete high 400
ip inspect one-minute low 300
ip inspect hashtable-size 2048
ip inspect tcp synwait-time 20
ip inspect tcp max-incomplete host 300 block-time 60
ip inspect name IDS ftp
no ip bootp server
ip domain name interbusiness.it
ip name-server 151.99.125.2
login block-for 1 attempts 3 within 30
login on-failure
login on-success
!
!
!
username xx.xx.xx.xx privilege 15 password xx.xx.xx.xx.xx
!
!
archive
log config
hidekeys
!
!
ip tcp selective-ack
ip tcp window-size 2144
ip tcp synwait-time 10
!
!
!
interface ATM0
description Interfaccia ATM0 - Connessione ADSL
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
no ip split-horizon
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.1 point-to-point
ip virtual-reassembly
pvc 8/35
oam-pvc manage
pppoe-client dial-pool-number 2
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description CONNESSIONE LAN ***
ip address 192.168.1.1 255.255.255.0
ip accounting output-packets
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1412
no ip mroute-cache
hold-queue 100 out
!
interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 2
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password xxxxxxxxxxxxxxxxxxxx
ppp pap sent-username [email protected] password xxxxxxxxxxx
ppp ipcp dns request
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
no ip http server
no ip http secure-server
ip nat inside source static tcp 192.168.1.157 80 interface Dialer0 80
ip nat inside source static tcp 192.168.1.157 110 interface Dialer0 110
ip nat inside source static tcp 192.168.1.157 143 interface Dialer0 143
ip nat inside source static tcp 192.168.1.157 25 interface Dialer0 25
ip nat inside source list 1 interface Dialer0 overload
!
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
control-plane
!
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 30 in
login tacacs
!
scheduler max-task-time 5000
no scheduler allocate


ecco qua avendo ip fisso ho usato la procedura con il mac address per farlo funzionare.
Intanto grazie

[paolomat75]

Prova così:

Codice: Seleziona tutto

ip nat inside source static tcp 192.168.1.157 80 interface Dialer0 80 extendable
ip nat inside source static tcp 192.168.1.157 110 interface Dialer0 110 extendable
ip nat inside source static tcp 192.168.1.157 143 interface Dialer0 143 extendable
ip nat inside source static tcp 192.168.1.157 25 interface Dialer0 25 extendable

Paolo

[bianc30]

ciao
quando gli do il comando che mi hai mandato mi dice invalid input detected at marker

Luigi

[paolomat75]

Posta

Codice: Seleziona tutto

show ip nat translation

[bianc30]

ip fisso te lo maschero

[bianc30]

Pro Inside global Inside local Outside local Outside global
tcp ip fisso:53469 192.168.1.104:53469 17.149.32.75:443 17.149.32.75:443
tcp ip fisso:63064 192.168.1.104:63064 17.149.36.223:5223 17.149.36.223:523
icmp ip fisso:6148 192.168.1.110:6148 192.168.0.1:6148 192.168.0.1:6148
icmp ip fisso:6148 192.168.1.110:6148 192.168.0.253:6148 192.168.0.253:6148
icmp ip fisso:6148 192.168.1.110:6148 192.168.0.254:6148 192.168.0.254:6148
udp ip fisso:54812 192.168.1.110:54812 94.245.121.253:3544 94.245.121.253:4
udp ip fisso:55104 192.168.1.110:55104 192.168.0.1:161 192.168.0.1:161
udp ip fisso:55104 192.168.1.110:55104 192.168.0.5:161 192.168.0.5:161
udp ip fisso:55104 192.168.1.110:55104 192.168.0.253:161 192.168.0.253:161
udp ip fisso:55104 192.168.1.110:55104 192.168.0.254:161 192.168.0.254:161
udp ip fisso:55105 192.168.1.110:55105 192.168.0.1:53 192.168.0.1:53
udp ip fisso:55105 192.168.1.110:55105 192.168.0.254:53 192.168.0.254:53
udp ip fisso:55838 192.168.1.110:55838 192.168.0.254:137 192.168.0.254:137
udp ip fisso:55839 192.168.1.110:55839 192.168.0.254:137 192.168.0.254:137
udp ipo fisso:55840 192.168.1.110:55840 192.168.0.254:137 192.168.0.254:137
udp ip fisso:55841 192.168.1.110:55841 192.168.0.254:137 192.168.0.254:137
udp ip fisso:55842 192.168.1.110:55842 192.168.0.254:137 192.168.0.254:137
udp ip fisso:55843 192.168.1.110:55843 192.168.0.254:137 192.168.0.254:137
udp ip fisso:55844 192.168.1.110:55844 192.168.0.254:137 192.168.0.254:137
udp ip fisso:55845 192.168.1.110:55845 192.168.0.254:137 192.168.0.254:137
udp ip fisso:58187 192.168.1.110:58187 192.168.0.254:137 192.168.0.254:137
udp ip fisso:58188 192.168.1.110:58188 192.168.0.254:137 192.168.0.254:137
udp ip fiso:58189 192.168.1.110:58189 192.168.0.254:137 192.168.0.254:137
tcp ipè fisso:64844 192.168.1.110:64844 173.194.35.63:80 173.194.35.63:80
tcp ip fisso:64845 192.168.1.110:64845 74.125.232.151:80 74.125.232.151:80
tcp ip fisso:64847 192.168.1.110:64847 173.194.35.9:80 173.194.35.9:80
tcp ip fisso:64848 192.168.1.110:64848 173.194.35.57:80 173.194.35.57:80
tcp ip fisso:64867 192.168.1.110:64867 192.168.0.253:23 192.168.0.253:23
tcp ip fisso:64868 192.168.1.110:64868 192.168.0.1:21 192.168.0.1:21
tcp ip fisso:64869 192.168.1.110:64869 192.168.0.253:80 192.168.0.253:80
tcp ip fisso:64870 192.168.1.110:64870 192.168.0.253:22 192.168.0.253:22
tcp ipfisso:64871 192.168.1.110:64871 192.168.0.253:21 192.168.0.253:21
tcp ip fisso:64872 192.168.1.110:64872 192.168.0.254:2210 192.168.0.254:220
tcp ip fisso:64873 192.168.1.110:64873 192.168.0.1:22 192.168.0.1:22
tcp ip fisso:64874 192.168.1.110:64874 192.168.0.5:80 192.168.0.5:80
tcp ip fisso:64875 192.168.1.110:64875 192.168.0.1:23 192.168.0.1:23
tcp ip fisso:64876 192.168.1.110:64876 192.168.0.1:80 192.168.0.1:80
tcp ip fisso:64877 192.168.1.110:64877 192.168.0.1:8291 192.168.0.1:8291
tcp ip fisso:64878 192.168.1.110:64878 192.168.0.5:8291 192.168.0.5:8291
tcp ip fisso:64879 192.168.1.110:64879 192.168.0.253:8291 192.168.0.253:821
tcp ip fisso:64883 192.168.1.110:64883 192.168.0.253:23 192.168.0.253:23
tcp ip fisso:64884 192.168.1.110:64884 192.168.0.1:21 192.168.0.1:21
tcp ip fisso:64885 192.168.1.110:64885 192.168.0.253:80 192.168.0.253:80
tcp ip fisso:64886 192.168.1.110:64886 192.168.0.253:22 192.168.0.253:22
tcp ip fisso:64887 192.168.1.110:64887 192.168.0.253:21 192.168.0.253:21
tcp ip fisso:64888 192.168.1.110:64888 192.168.0.254:2210 192.168.0.254:220
tcp ip fisso:64889 192.168.1.110:64889 192.168.0.1:22 192.168.0.1:22
tcp ip fisso:64890 192.168.1.110:64890 192.168.0.5:80 192.168.0.5:80
tcp ip fisso:64891 192.168.1.110:64891 192.168.0.1:23 192.168.0.1:23
tcp ip fisso:64892 192.168.1.110:64892 192.168.0.1:80 192.168.0.1:80
tcp ip fisso:64897 192.168.1.110:64897 192.168.0.253:23 192.168.0.253:23
tcp ip fisso:64898 192.168.1.110:64898 192.168.0.1:21 192.168.0.1:21
tcp ip fisso:64899 192.168.1.110:64899 192.168.0.253:80 192.168.0.253:80
tcp ip fisso:64900 192.168.1.110:64900 192.168.0.253:22 192.168.0.253:22
tcp ip fisso:64901 192.168.1.110:64901 192.168.0.253:21 192.168.0.253:21
tcp ip fisso:64902 192.168.1.110:64902 192.168.0.254:2210 192.168.0.254:220
tcp ip fisso:64903 192.168.1.110:64903 192.168.0.1:22 192.168.0.1:22
tcp ip fisso:64904 192.168.1.110:64904 192.168.0.5:80 192.168.0.5:80
tcp ip fisso:64905 192.168.1.110:64905 192.168.0.1:23 192.168.0.1:23
tcp ip fisso:64906 192.168.1.110:64906 192.168.0.1:80 192.168.0.1:80


ecco qua ciao

[paolomat75]

Che rete è la 192.168.0.x?

[bianc30]

non esiste una rete sotto base 192.168.0.?
ce solo 192.168.1.?