Very Computer

Anybody have any ideas?

I'm having some problems sending mail from the localhost on a Mandrake 7.1
machine with some ipchains rules defined.  Here's my ipchains configuration:

Chain input (policy DENY):
target     prot opt     source                destination           ports
ACCEPT     tcp  !y----  anywhere             myhost.org             any ->
any
ACCEPT     tcp  !y----  myhost.org            anywhere              any ->
any
ACCEPT     tcp  ------  anywhere             myhost.org
            domain ->   any
ACCEPT     udp  ------  anywhere             myhost.org
            domain ->   any
ACCEPT     tcp  ------  anywhere             myhost.org             any ->
www
ACCEPT     tcp  ------  anywhere             bmyhost.org             any ->
ssh
ACCEPT     tcp  ------  anywhere             myhost.org             any ->
smtp
ACCEPT     tcp  ------  anywhere             myhost.org             any ->
ftp
ACCEPT     tcp  ------  anywhere             myhost.org             any ->
ftp-data
ACCEPT     icmp ------  anywhere             anywhere              any ->
any
ACCEPT     tcp  ------  anywhere             localhost.localdomain  any ->
any
ACCEPT     all  ---f--  anywhere             anywhere              n/a
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):

If I telnet to port 25 of the machine from any external host, I get the
regular smtp server prompt, and I am able to send mail through this machine
from the external hosts that Postfix is configured to accept messages from.
However, if I telnet to port 25 of localhost on this machine, the connection
times out.  PLUS, I can ftp and ssh to localhost on this machine with the
above configuration, so I'm really scratching my head.

If I flush the ipchains rules with 'ipchains -F input' and set the input
chain's policy to accept with 'ipchains -P input ACCEPT', I can connect to
my SMTP server from the localhost just fine and dandy, and send mail from
Pine.  So: I'm pretty sure it's something in the ipchains setup.

I'd appreciate any help on this...it's really making me nuts!

thanks,

--
Mitch Foxworth
mitch f with a pop3 account at oz period net
"We may say: only someone who already knows how to do something
with a thing can significantly ask its name." -- Ludwig Wittgenstein

You might add a rule at the end of your IPchains list that logs any
unexpected packets,
and try again.  The syslog then should tell you what is getting tossed on
the floor.

An offhand guess is that your sendmail is configured to demand an IDENT
exchange,
which may not be permitted, before it will actually respond on the
localhost.