Byteplant Forum

Home » CleanMail Support » CleanMail Server Talk » No Connect from external adresses
No Connect from external adresses [message #992] Fri, 07 January 2005 17:54
schubo
Messages: 6
Registered: January 2005
Junior Member
Hi,

i just installed my licenced SMTP version today on a designated NSP-Server (w2k/SP4/450Mhz, 256MB) here.
I tested it on another system (same specs !) for evaluation where it worked fine.

Now i configured the "new" system completely identic to the first one (except of course the IPs) Filters, Rules and so on are the same.

The Mail is routed through my ISA-Server (Firewall) to the NSP-Server which passes them over to the VirusWall (TrendMicro) wo passes them over to Exchange2k. Each Server is a designated single machine with its own IP.

The problem is now:
i can connect via telnet from internal adresses (like my workstation) to the NEW NSP-Server and generate Mails manually using SMTP-commands,
as soon as the Firewall is redirected to this NEW Server it says: "Connection reset by client (recv failed)" on every effort on trying to test or send from the "outside" -> sending mails from the outside is therefore not possible as the server does not accept any connect as it seems.
Switching back to the OLD evaluation-system (that is still running) > perfect ...
What can the problem be ? The test-server is not a Domain-Member, but that should not be a problem to this, should it?

kind regards and a nice weekend,

Markus

Re: No Connect from external adresses [message #993 is a reply to message #992] Mon, 10 January 2005 11:57 Go to previous message
support
Messages: 918
Registered: April 2004
Senior Member
What other software is installed on the production system?

Maybe there is some interference or config problem with other firewall/virus scanner/proxy software.



Customer Support
Byteplant GmbH
Re: No Connect from external adresses [message #994 is a reply to message #993] Tue, 11 January 2005 11:58 Go to previous message
schubo
Messages: 6
Registered: January 2005
Junior Member
The production server is installed "clean" which means:

W2k Server / Sp4 / All Security Patches
eTrust AV 7.0
IE6 SP1


for comparison:

the "testsystem" (the one that is actually working):

W2k professional / SP4 / All Security Updates
eTrust AV 7.0
MS .Net framework 1.1
IE 6 SP1
Office XP prof
Navision Financials

IP-Config is identical (except units IP, but Subnetmask, Gateway, DNS, WINS etc.)

Any Ideas ?
Many thanks in advance,

Markus Pöschl
Re: No Connect from external adresses [message #995 is a reply to message #994] Tue, 11 January 2005 17:49 Go to previous message
support
Messages: 918
Registered: April 2004
Senior Member
schubo wrote:

> The production server is installed "clean" which means:
>
> W2k Server / Sp4 / All Security Patches
> eTrust AV 7.0
> IE6 SP1
>
>
> for comparison:
>
> the "testsystem" (the one that is actually working):
>
> W2k professional / SP4 / All Security Updates
> eTrust AV 7.0
> MS .Net framework 1.1
> IE 6 SP1
> Office XP prof
> Navision Financials
>
> IP-Config is identical (except units IP, but Subnetmask,
> Gateway, DNS, WINS etc.)
>
> Any Ideas ?
> Many thanks in advance,

Please turn on detailed logging, retry connecting and then send your
nospamtoday.cf and nospamtoday.log files to nstsupport@byteplant.com
for inspection.



Customer Support
Byteplant GmbH
Re: No Connect from external adresses [message #996 is a reply to message #992] Tue, 11 January 2005 18:14 Go to previous message
swu
Messages: 4
Registered: January 2005
Junior Member
Have you looked at your FW for any rules that would block the different (new) IP from connecting? Sounds like a FW or ACL that is blocking causing the reset message.

schubo wrote:

> Hi,
>
> i just installed my licenced SMTP version today on a
> designated NSP-Server (w2k/SP4/450Mhz, 256MB) here.
> I tested it on another system (same specs !) for evaluation
> where it worked fine.
>
> Now i configured the "new" system completely identic to the
> first one (except of course the IPs) Filters, Rules and so on
> are the same.
>
> The Mail is routed through my ISA-Server (Firewall) to the
> NSP-Server which passes them over to the VirusWall (TrendMicro)
> wo passes them over to Exchange2k. Each Server is a designated
> single machine with its own IP.
>
> The problem is now:
> i can connect via telnet from internal adresses (like my
> workstation) to the NEW NSP-Server and generate Mails manually
> using SMTP-commands,
> as soon as the Firewall is redirected to this NEW Server it
> says: "Connection reset by client (recv failed)" on every
> effort on trying to test or send from the "outside" -> sending
> mails from the outside is therefore not possible as the server
> does not accept any connect as it seems.
> Switching back to the OLD evaluation-system (that is still
> running) > perfect ...
> What can the problem be ? The test-server is not a
> Domain-Member, but that should not be a problem to this,
> should it?
>
> kind regards and a nice weekend,
>
> Markus
>

Re: No Connect from external adresses [message #997 is a reply to message #996] Wed, 12 January 2005 09:38 Go to previous message
schubo
Messages: 6
Registered: January 2005
Junior Member
swu wrote:

> Have you looked at your FW for any rules that would block the
> different (new) IP from connecting? Sounds like a FW or ACL
> that is blocking causing the reset message.

I checked this. All i do is to redirect the IP-Adress on the FW. I only change from "Testsystem"-IP to "live-System-IP" all other settings remain untouched.

Greets
Re: No Connect from external adresses [message #998 is a reply to message #992] Wed, 12 January 2005 23:59 Go to previous message
swu
Messages: 4
Registered: January 2005
Junior Member
Hi -

Break out the sniffer to see who or what is closing down the connection.


schubo wrote:

> Hi,
>
> i just installed my licenced SMTP version today on a
> designated NSP-Server (w2k/SP4/450Mhz, 256MB) here.
> I tested it on another system (same specs !) for evaluation
> where it worked fine.
>
> Now i configured the "new" system completely identic to the
> first one (except of course the IPs) Filters, Rules and so on
> are the same.
>
> The Mail is routed through my ISA-Server (Firewall) to the
> NSP-Server which passes them over to the VirusWall (TrendMicro)
> wo passes them over to Exchange2k. Each Server is a designated
> single machine with its own IP.
>
> The problem is now:
> i can connect via telnet from internal adresses (like my
> workstation) to the NEW NSP-Server and generate Mails manually
> using SMTP-commands,
> as soon as the Firewall is redirected to this NEW Server it
> says: "Connection reset by client (recv failed)" on every
> effort on trying to test or send from the "outside" -> sending
> mails from the outside is therefore not possible as the server
> does not accept any connect as it seems.
> Switching back to the OLD evaluation-system (that is still
> running) > perfect ...
> What can the problem be ? The test-server is not a
> Domain-Member, but that should not be a problem to this,
> should it?
>
> kind regards and a nice weekend,
>
> Markus
>

Previous Topic: Client Disconnects... Again
Next Topic: Filter settings with multiple proxies.
Goto Forum:
  


Current Time: Wed Sep 28 13:56:30 CEST 2016