On Mon, Aug 16, 2010 at 3:45 PM, David Woodhouse <dwmw2@???> wrote:
> On Mon, 2010-08-16 at 23:24 +0100, Stephen Gran wrote:
>> On Mon, Aug 16, 2010 at 10:37:19PM +0100, Martin A. Brooks said:
>> > On Mon, August 16, 2010 21:55, Grant Peel wrote:
>> > > Hi all,
>> > >
>> > > What are all the ports that exim might use for the control channell
>> > > and data transfers?
>> > >
>> > > I have a hole punched in my switche's firewall, (port 25 and 587).
>> > > but somehow I am still getting operation timeouts when it talking
>> > > with other servers.
>> >
>> > What has your research into the SMTP protocol suggested to you so far?
>>
>> I suspect that the twin bugbears of ident and name service are going to
>> prove fruitful areas of research.
>
> And ICMP, of course. Blocking that could lead to timeouts as soon as you
> actually start trying to transfer data.
>
> --
> dwmw2
>
>
> --
> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
Shouldnt need any ICMP ports open inbound for SMTP, its all TCP.
I would suggest that if you are NATing, that you have the correct
configuration to keep state for your connections.
Your firewall should also allow all the common SMTP ports outbound (25, 465).
--
Brent Jones
brent@???
