firewall - Can't connect to port 25 on Google Compute instance (incoming SMTP) -
i running postfix on google compute instance. listening on 0.0.0.0:25, , have opened port 25 on firewall, cannot connect outside. have reviewed this , this, not resolve issue. don't see in google compute documentation explain this.
the port open on firewall:
% gcutil --project=xxx getfirewall smtp +---------------+-------------------------------+ | name | smtp | | description | incoming smtp allowed. | | creation-time | 2014-06-08t13:29:16.052-07:00 | | network | default | | source-ips | 0.0.0.0/0 | | source-tags | | | target-tags | | | allowed | tcp: 25 | +---------------+-------------------------------+
from outside, can connect port 80 (which open)...
% telnet 108.xxx.xxx.xxx 80 trying 108.xxx.xxx.xxx... connected 108.xxx.xxx.xxx. escape character '^]'. / <!doctype html> <html ...> ... </html>connection closed foreign host.
...but not port 25:
% telnet 108.xxx.xxx.xxx 25 trying 108.xxx.xxx.xxx... telnet: connect address 108.xxx.xxx.xxx: operation timed out telnet: unable connect remote host
postfix listening on interfaces:
% gcutil --project=xxx ssh --zone=us-central1-a xxx sudo netstat -lpn -a inet ... active internet connections (only servers) proto recv-q send-q local address foreign address state pid/program name ... tcp 0 0 0.0.0.0:25 0.0.0.0:* listen 10794/master ...
i can "external" address...
% gcutil --project=xxx ssh --zone=us-central1-a xxx /sbin/ifconfig eth0 ... eth0 link encap:ethernet hwaddr 42:01:0a:xx:xx:xx inet addr:10.xxx.xxx.xxx bcast:10.xxx.xxx.xxx mask:255.255.255.255 broadcast running multicast mtu:1460 metric:1 rx packets:46397953 errors:0 dropped:0 overruns:0 frame:2 tx packets:34953374 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 rx bytes:5031906871 (4.6 gib) tx bytes:49375287245 (45.9 gib)
...and telnet port 25 on box:
% gcutil --project=xxx ssh --zone=us-central1-a xxx telnet 10.xxx.xxx.xxx 25 ... trying 10.xxx.xxx.xxx... connected 10.xxx.xxx.xxx. escape character '^]'. 220 xxx esmtp postfix (debian/gnu) ehlo localhost 250-xxx 250-pipelining 250-size 10240000 250-vrfy 250-etrn 250-starttls 250-enhancedstatuscodes 250-8bitmime 250 dsn quit 221 2.0.0 bye connection closed foreign host.
any assistance appreciated.
take @ link blocked traffic says google blocks or restricts traffic through of following ports/protocols between internet , virtual machines on specified ports.
hope helps.
mary
Comments
Post a Comment