Помогите пожалуйста настроить почту на сервере

[imediasun]

У меня несколько ай пи адресов, проблема заключается в том что почтовые клиенты не видят smtp сервер, что можно сделать чтобы настроить правильно работу почты

(Нажмите, чтобы показать/скрыть)

netstat -anp | grep LISTEN
tcp        0      0 0.0.0.0:25              0.0.0.0:*

[ArcFi]

На SMTP-сервере:

Код: [Выделить]

sudo iptables-save
sudo ss -lnpAinet | grep :25

[imediasun]

Что это значит и что теперь?

(Нажмите, чтобы показать/скрыть)

imediasun@webmaxi:~$ sudo iptables-save
[sudo] password for imediasun:
# Generated by iptables-save v1.4.12 on Thu Jun 26 10:18:54 2014
*mangle
:PREROUTING ACCEPT [167076:37876462]
:INPUT ACCEPT [166170:37851094]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [169299:132508437]
:POSTROUTING ACCEPT [169353:132512367]
COMMIT
# Completed on Thu Jun 26 10:18:54 2014
# Generated by iptables-save v1.4.12 on Thu Jun 26 10:18:54 2014
*nat
:PREROUTING ACCEPT [5301:563296]
:INPUT ACCEPT [1582:83259]
:OUTPUT ACCEPT [9542:608304]
:POSTROUTING ACCEPT [9532:607631]
COMMIT
# Completed on Thu Jun 26 10:18:54 2014
# Generated by iptables-save v1.4.12 on Thu Jun 26 10:18:54 2014
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [1091:695448]
:INT_IN - [0:0]
:INT_OUT - [0:0]
:PAROLE - [0:0]
:PUB_IN - [0:0]
:PUB_OUT - [0:0]
:fail2ban-dovecot-pop3imap - [0:0]
:fail2ban-pureftpd - [0:0]
:fail2ban-ssh - [0:0]
-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
-A INPUT -d 127.0.0.0/8 ! -i lo -p tcp -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 224.0.0.0/4 -j DROP
-A INPUT -i eth+ -j PUB_IN
-A INPUT -i ppp+ -j PUB_IN
-A INPUT -i slip+ -j PUB_IN
-A INPUT -i venet+ -j PUB_IN
-A INPUT -i bond+ -j PUB_IN
-A INPUT -j DROP
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j DROP
-A OUTPUT -o eth+ -j PUB_OUT
-A OUTPUT -o ppp+ -j PUB_OUT
-A OUTPUT -o slip+ -j PUB_OUT
-A OUTPUT -o venet+ -j PUB_OUT
-A OUTPUT -o bond+ -j PUB_OUT
-A INT_IN -p icmp -j ACCEPT
-A INT_IN -j DROP
-A INT_OUT -p icmp -j ACCEPT
-A INT_OUT -j ACCEPT
-A PAROLE -j ACCEPT
-A PUB_IN -p icmp -m icmp --icmp-type 3 -j ACCEPT
-A PUB_IN -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A PUB_IN -p icmp -m icmp --icmp-type 11 -j ACCEPT
-A PUB_IN -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A PUB_IN -p tcp -m tcp --dport 20 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 21 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 22 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 25 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 2525 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 465 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 587 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 53 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 80 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 110 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 143 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 443 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 993 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 995 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 3306 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 8080 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 8081 -j PAROLE
-A PUB_IN -p tcp -m tcp --dport 10000 -j PAROLE
-A PUB_IN -p udp -m udp --dport 53 -j ACCEPT
-A PUB_IN -p udp -m udp --dport 3306 -j ACCEPT
-A PUB_IN -p icmp -j DROP
-A PUB_IN -j DROP
-A PUB_OUT -j ACCEPT
-A fail2ban-dovecot-pop3imap -j RETURN
-A fail2ban-pureftpd -j RETURN
-A fail2ban-ssh -s 116.10.191.234/32 -j DROP
-A fail2ban-ssh -s 61.174.51.227/32 -j DROP
-A fail2ban-ssh -j RETURN
COMMIT
# Completed on Thu Jun 26 10:18:54 2014
imediasun@webmaxi:~$ sudo ss -lnpAinet | grep :25
tcp    LISTEN     0      100                   :::25                   :::*      users:(("smtpd",12390,7),("smtpd",12386,7),("master",3289,13))
tcp    LISTEN     0      100                    *:25                    *:*      users:(("smtpd",12390,6),("smtpd",12386,6),("master",3289,12))

[ArcFi]

Что это значит и что теперь?

Диагностика. Мадо данных.
Дальше

Код: [Выделить]

ip a ; ip r ; sudo iptables-save -c ; sudo postconf inet_interfaces inet_protocols

[imediasun]

Сделал, что дальше?

(Нажмите, чтобы показать/скрыть)

imediasun@webmaxi:~$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 90:1b:0e:1a:1b:3d brd ff:ff:ff:ff:ff:ff
    inet 91.192.136.219/29 brd 91.192.136.223 scope global eth0
       valid_lft forever preferred_lft forever
    inet 91.192.136.220/29 brd 91.192.136.223 scope global secondary eth0:1
       valid_lft forever preferred_lft forever
    inet 91.192.136.221/29 brd 91.192.136.223 scope global secondary eth0:2
       valid_lft forever preferred_lft forever
    inet 91.192.136.222/29 brd 91.192.136.223 scope global secondary eth0:3
       valid_lft forever preferred_lft forever
    inet6 fe80::921b:eff:fe1a:1b3d/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
    link/ether 90:1b:0e:09:f0:15 brd ff:ff:ff:ff:ff:ff
imediasun@webmaxi:~$ ip r
default via 91.192.136.217 dev eth0  metric 100
91.192.136.216/29 dev eth0  proto kernel  scope link  src 91.192.136.219
169.254.0.0/16 dev eth0  scope link  metric 1000
imediasun@webmaxi:~$ sudo iptables-save -c
[sudo] password for imediasun:
# Generated by iptables-save v1.4.12 on Thu Jun 26 15:02:37 2014
*mangle
:PREROUTING ACCEPT [282086:65603448]
:INPUT ACCEPT [280673:65563872]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [280585:234103840]
:POSTROUTING ACCEPT [280674:234110298]
COMMIT
# Completed on Thu Jun 26 15:02:37 2014
# Generated by iptables-save v1.4.12 on Thu Jun 26 15:02:37 2014
*nat
:PREROUTING ACCEPT [10775:1109569]
:INPUT ACCEPT [3606:189369]
:OUTPUT ACCEPT [13977:890354]
:POSTROUTING ACCEPT [13967:889681]
COMMIT
# Completed on Thu Jun 26 15:02:37 2014
# Generated by iptables-save v1.4.12 on Thu Jun 26 15:02:37 2014
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [4472:1052563]
:INT_IN - [0:0]
:INT_OUT - [0:0]
:PAROLE - [0:0]
:PUB_IN - [0:0]
:PUB_OUT - [0:0]
:fail2ban-dovecot-pop3imap - [0:0]
:fail2ban-pureftpd - [0:0]
:fail2ban-ssh - [0:0]
[5482:428162] -A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
[0:0] -A INPUT -d 127.0.0.0/8 ! -i lo -p tcp -j DROP
[263893:64023852] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
[6827:409620] -A INPUT -i lo -j ACCEPT
[0:0] -A INPUT -s 224.0.0.0/4 -j DROP
[7616:970972] -A INPUT -i eth+ -j PUB_IN
[0:0] -A INPUT -i ppp+ -j PUB_IN
[0:0] -A INPUT -i slip+ -j PUB_IN
[0:0] -A INPUT -i venet+ -j PUB_IN
[0:0] -A INPUT -i bond+ -j PUB_IN
[0:0] -A INPUT -j DROP
[0:0] -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
[0:0] -A FORWARD -j DROP
[144949:202798059] -A OUTPUT -o eth+ -j PUB_OUT
[0:0] -A OUTPUT -o ppp+ -j PUB_OUT
[0:0] -A OUTPUT -o slip+ -j PUB_OUT
[0:0] -A OUTPUT -o venet+ -j PUB_OUT
[0:0] -A OUTPUT -o bond+ -j PUB_OUT
[0:0] -A INT_IN -p icmp -j ACCEPT
[0:0] -A INT_IN -j DROP
[0:0] -A INT_OUT -p icmp -j ACCEPT
[0:0] -A INT_OUT -j ACCEPT
[3195:167572] -A PAROLE -j ACCEPT
[14:1322] -A PUB_IN -p icmp -m icmp --icmp-type 3 -j ACCEPT
[0:0] -A PUB_IN -p icmp -m icmp --icmp-type 0 -j ACCEPT
[2:202] -A PUB_IN -p icmp -m icmp --icmp-type 11 -j ACCEPT
[34:1448] -A PUB_IN -p icmp -m icmp --icmp-type 8 -j ACCEPT
[4:160] -A PUB_IN -p tcp -m tcp --dport 20 -j PAROLE
[12:612] -A PUB_IN -p tcp -m tcp --dport 21 -j PAROLE
[262:12400] -A PUB_IN -p tcp -m tcp --dport 22 -j PAROLE
[562:31852] -A PUB_IN -p tcp -m tcp --dport 25 -j PAROLE
[177:8968] -A PUB_IN -p tcp -m tcp --dport 2525 -j PAROLE
[2:92] -A PUB_IN -p tcp -m tcp --dport 465 -j PAROLE
[51:2584] -A PUB_IN -p tcp -m tcp --dport 587 -j PAROLE
[9:408] -A PUB_IN -p tcp -m tcp --dport 53 -j PAROLE
[1666:88384] -A PUB_IN -p tcp -m tcp --dport 80 -j PAROLE
[47:2444] -A PUB_IN -p tcp -m tcp --dport 110 -j PAROLE
[18:936] -A PUB_IN -p tcp -m tcp --dport 143 -j PAROLE
[32:1524] -A PUB_IN -p tcp -m tcp --dport 443 -j PAROLE
[1:52] -A PUB_IN -p tcp -m tcp --dport 993 -j PAROLE
[15:804] -A PUB_IN -p tcp -m tcp --dport 995 -j PAROLE
[209:9864] -A PUB_IN -p tcp -m tcp --dport 3306 -j PAROLE
[128:6488] -A PUB_IN -p tcp -m tcp --dport 8080 -j PAROLE
[0:0] -A PUB_IN -p tcp -m tcp --dport 8081 -j PAROLE
[0:0] -A PUB_IN -p tcp -m tcp --dport 10000 -j PAROLE
[26:1617] -A PUB_IN -p udp -m udp --dport 53 -j ACCEPT
[0:0] -A PUB_IN -p udp -m udp --dport 3306 -j ACCEPT
[0:0] -A PUB_IN -p icmp -j DROP
[4345:798811] -A PUB_IN -j DROP
[144949:202798059] -A PUB_OUT -j ACCEPT
[121604:6735909] -A fail2ban-dovecot-pop3imap -j RETURN
[23120:1258362] -A fail2ban-pureftpd -j RETURN
[3145:268734] -A fail2ban-ssh -j RETURN
COMMIT
# Completed on Thu Jun 26 15:02:37 2014
imediasun@webmaxi:~$ sudo postconf inet_interfaces inet_protocols
inet_interfaces = all
inet_protocols = all

[ArcFi]

Iptables выглядит вменяемо.
Ограничений по интерфейсам/протоколам в конфигурации не наблюдается.

Судя по белым IP, клиенты заходят на сервер с инета.
Насколько мне известно, не все провайдеры разрешают исходящий трафик на 25/tcp.
Надо перенастроить сервак так, чтобы он слушал 587/tcp или 465/tcp.