OPNsense Forum

Archive => 18.1 Legacy Series => Topic started by: wyliecoyoteuk on April 18, 2018, 03:16:02 pm

Title: [SOLVED]Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 18, 2018, 03:16:02 pm
We are running 17.1, but are trying to upgrade to 18.1.
However on the new firewall, when we install it and restore the config from 17.7, our internal Exchange server cannot connect outbound to other SMTP connections.
What has changed that might cause this?
I have tried telnet to an external mail server on port 25, and that fails to connect as well.
incoming mail, web and  SIP connections etc, all seem fine.
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: mimugmail on April 18, 2018, 03:17:44 pm
18.1. or 18.1.6? Perhaps you have some NAT rules, there might be a reverted change in 18.1.6 fixing this ...
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 18, 2018, 03:39:30 pm
18.1
Thanks for the quick reply, I will download that now :)
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 18, 2018, 03:50:52 pm
There only seem to be 18.1 images available, will they be the 18.1.6 release now?
Our install shows as 18.1
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 18, 2018, 04:05:11 pm
Sorry realised i need to install and then update
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: ScottSenffner on April 23, 2018, 02:45:49 pm
did the upgrade help? I am on 18.1.6 and I can't get it the SMTP to work.
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 23, 2018, 05:35:41 pm
Will be trying it later, our backup box is still on 17.6
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 23, 2018, 06:28:49 pm
no difference :(
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 24, 2018, 02:47:06 pm
So, 17 works, but 18.1 fails, yet both systems have exactly the same settings.
Is this a problem with NAT?
Any hints would be welcome.
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: mimugmail on April 24, 2018, 04:27:53 pm
Go to CLI and do a tcpdump:

tcpdump -n -i <internal-physical-nic> host your-exchange-ip

See if packets arrive firewall.

If yes:

clog /var/log/filter.log | grep your-exchange-ip

See if you have drops

If no:

tcpdump -n -i <external-physical-nic> port 25

And check if you see outgoing packet when doing a telnet.
Title: Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 24, 2018, 04:39:05 pm
Thanks, I'll look at that.
Title: [SOLVED]Re: Upgraded to 18.1 SMTP outgoing no longer works
Post by: wyliecoyoteuk on April 24, 2018, 05:10:43 pm
We found that all SMTP traffic (outbound and inbound) was being directed to our mailserver.
Disabled NAT reflection for the SMTP PF rule, and it started working.
Don't know why 17.7 worked with NAT reflection enabled globally and 18.1 doesn't.
Thanks again.