Author Topic: [SOLVED]Upgraded to 18.1 SMTP outgoing no longer works (Read 6123 times)

wyliecoyoteuk · « **on:** April 18, 2018, 03:16:02 pm »

We are running 17.1, but are trying to upgrade to 18.1.
However on the new firewall, when we install it and restore the config from 17.7, our internal Exchange server cannot connect outbound to other SMTP connections.
What has changed that might cause this?
I have tried telnet to an external mail server on port 25, and that fails to connect as well.
incoming mail, web and SIP connections etc, all seem fine.

mimugmail · « **Reply #1 on:** April 18, 2018, 03:17:44 pm »

18.1. or 18.1.6? Perhaps you have some NAT rules, there might be a reverted change in 18.1.6 fixing this ...

wyliecoyoteuk · « **Reply #2 on:** April 18, 2018, 03:39:30 pm »

18.1
Thanks for the quick reply, I will download that now

wyliecoyoteuk · « **Reply #3 on:** April 18, 2018, 03:50:52 pm »

There only seem to be 18.1 images available, will they be the 18.1.6 release now?
Our install shows as 18.1

wyliecoyoteuk · « **Reply #4 on:** April 18, 2018, 04:05:11 pm »

Sorry realised i need to install and then update

ScottSenffner · « **Reply #5 on:** April 23, 2018, 02:45:49 pm »

did the upgrade help? I am on 18.1.6 and I can't get it the SMTP to work.

wyliecoyoteuk · « **Reply #6 on:** April 23, 2018, 05:35:41 pm »

Will be trying it later, our backup box is still on 17.6

wyliecoyoteuk · « **Reply #7 on:** April 23, 2018, 06:28:49 pm »

no difference

wyliecoyoteuk · « **Reply #8 on:** April 24, 2018, 02:47:06 pm »

So, 17 works, but 18.1 fails, yet both systems have exactly the same settings.
Is this a problem with NAT?
Any hints would be welcome.

mimugmail · « **Reply #9 on:** April 24, 2018, 04:27:53 pm »

Go to CLI and do a tcpdump:

tcpdump -n -i <internal-physical-nic> host your-exchange-ip

See if packets arrive firewall.

If yes:

clog /var/log/filter.log | grep your-exchange-ip

See if you have drops

If no:

tcpdump -n -i <external-physical-nic> port 25

And check if you see outgoing packet when doing a telnet.

wyliecoyoteuk · « **Reply #10 on:** April 24, 2018, 04:39:05 pm »

Thanks, I'll look at that.

wyliecoyoteuk · « **Reply #11 on:** April 24, 2018, 05:10:43 pm »

We found that all SMTP traffic (outbound and inbound) was being directed to our mailserver.
Disabled NAT reflection for the SMTP PF rule, and it started working.
Don't know why 17.7 worked with NAT reflection enabled globally and 18.1 doesn't.
Thanks again.

Author Topic: [SOLVED]Upgraded to 18.1 SMTP outgoing no longer works (Read 6123 times)

wyliecoyoteuk

[SOLVED]Upgraded to 18.1 SMTP outgoing no longer works

mimugmail

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

ScottSenffner

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

mimugmail

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

Re: Upgraded to 18.1 SMTP outgoing no longer works

wyliecoyoteuk

[SOLVED]Re: Upgraded to 18.1 SMTP outgoing no longer works