27 May
2004
27 May
'04
1:45 p.m.
Hi,
Thanks ${DEITY} there is webmail.
Background information :
I've been having problems sending e-mails for the past 4 days.
I'm using Coditel cable as my ISP, so far it was working OK, almost no
problem.
Symptoms :
For the past 4 weeks there have been increasing problems, first my mails
seemed to be rejected by Sendar for some obscure "IP forwarding" question
and Thierry helped me with that. I had to fix my parameters in Ximian
Evolution and Kmail (I'm using both, yes, different e-mail adresses,
different "identities", different repositories etc...)
The last time I was able to send myil from my normal account was on Sunday
night, since then all I get is some error message saying "unable to
connect to sendar port 25".
I _am_ able to retrieve my mails from Sendar though and I do receive
e-mails on each of my e-mail adresses.
I called Thierry and we checked a few things and it doesn't seem to come
from Sendar, so I called the Coditel (un)help-line to inquire. As usual
they at first considered I might have problems with Outlook or perhaps a
trojan on my system, I explained that neither Kmail, nor Evolution, nor
Linux are all that suscpetible to windows virii (they were actually
understanding about that) and said there have been "several" reports of
users having trouble sending e-mail, they were surprised though that I
_am_ able to send e-mail with my Coditel account (surprise, this works)
Since I'm not all too confident they'll find a solution fast enough for my
(and Lilux's) needs I want to ask you guys
1) are there other people here who'd be using Coditel cable ISP ? do you
have similar problems?
2) where (and how) can I find/activate the logs so I can actually check
what's happening when my system's trying to connect to Sendar's port 25?
3) Sendar responds to ping, but I can't ssh to Sendar either, might be
similar filtering from Coditel, how can I investigate this?
4) any other suggestions
Any help will be appreciated, printed if possible, applied to find the
reason, the bill will be sent to Coditel and funding given to LiLux ;))
thanks
Serge
----------------------------------------------------------------------
'Software patents kill technical innovation"
----------------------------------------------------------------------
Serge Marelli,
E-mail : serge.marelli(a)linux.lu
----------------------------------------------------------------------
LiLux : http://www.linux.lu/
Protecting Innovation against Patent Inflation
http://swpat.ffii.org/
over 200,000 votes & 2000 firms against software patents
http://noepatents.org/
27 May
27 May
2:50 p.m.
Hi Serge,
For the past 4 weeks there have been increasing
problems, first my mails
seemed to be rejected by Sendar for some obscure "IP forwarding" question
and Thierry helped me with that. I had to fix my parameters in Ximian
Evolution and Kmail (I'm using both, yes, different e-mail adresses,
different "identities", different repositories etc...)
?? Sounds strange. -v please (maybe at the meeting tonight)
The last time I was able to send myil from my normal
account was on Sunday
night, since then all I get is some error message saying "unable to
connect to sendar port 25".
Try this:
(as root), run tcpdump
(as anyone), telnet sendar.prophecy.lu 25
Check the tcpdump - you'll see the outgoing packets from your machine
to sendar, you should also see the replies coming. If nothing comes
back (not even ACKs), chances are your traffic is being dropped on
the way - question is where.
Oh yes, if the telnet works, you'll see this:
bash-2.05b$ telnet sendar.prophecy.lu 25
Trying 213.166.63.242...
Connected to sendar.prophecy.lu.
Escape character is '^]'.
220-sendar.prophecy.lu ESMTP Sendmail 8.12.10 ready at Thu, 27 May 2004
16:50:02 +0200
220 No Spam please!
(close via "quit")
Also try this (as root):
nmap -p 25 sendar.prophecy.lu
You should get:
root # nmap -p 25 sendar.prophecy.lu
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-05-27 16:32 CEST
Interesting ports on sendar.prophecy.lu (213.166.63.242):
PORT STATE SERVICE
25/tcp open smtp
If it says filtered instead of open, again, we'll know packets are
being dropped on the way. If it says closed, the packets are not
dropped but rejected.
I _am_ able to retrieve my mails from Sendar though
and I do receive
e-mails on each of my e-mail adresses.
Different port...
I called Thierry and we checked a few things and it
doesn't seem to come
from Sendar, so I called the Coditel (un)help-line to inquire. As usual
they at first considered I might have problems with Outlook or perhaps a
trojan on my system, I explained that neither Kmail, nor Evolution, nor
Linux are all that suscpetible to windows virii (they were actually
understanding about that) and said there have been "several" reports of
users having trouble sending e-mail, they were surprised though that I
_am_ able to send e-mail with my Coditel account (surprise, this works)
... which I assume you're sending via the Coditel mailserver?
Note: whatever mail you're sending out, you're _always_ supposed
to go through your ISP's mailserver. If you're trying to deliver
mail directly, chances are that the recipient's mailserver will
see your IP as belonging to a DUL (dial-up list), and thus refuse
to talk to you (as much spam comes from dialups, be that analog,
ISDN, dsl or cable).
A From: (or envelope Mail From:) is easily forged, so if the
server allows you to send mail based on that only, it's to be
considered an open relay. If it uses pop-before-smtp or smtp-auth,
things look better.
Now, when trying the above - get Thierry to have a tcpdump
running on his firewall (I bet there must be one ;-)) to see
whether the packet arrives there. Give him your IP address
first, so he can filter directly for your traffic. A short
phone call will make sure it's no problem on TC's end.
3) Sendar responds to ping, but I can't ssh to
Sendar either, might be
similar filtering from Coditel, how can I investigate this?
IMHO that would fit the bill.
4) any other suggestions
Ask Coditel whether they are filtering traffic. Ask them whether
they block outbound SMTP traffic (unless going through their
mailserver - this makes a lot of sense, considering all the mail
resp. Outlook viruses as well as spam), ask them whether they
filter anything else, whether they force your HTTP traffic
through a proxy etc.
I can very much symphathize with them if they are filtering
outbound SMTP traffic (I'm seriously considering this measure
@work), I can understand if they use a web proxy, I very much
understand if they drop ports 137-139 traffic (SMB), but they
certainly should bloody leave alone an SSH port (22).
Note, I can symphatize/understand this, but if they do it, they
should inform their customers, and offer their clued customers (tm)
[not that there are many] a way around this. Personally, I wouldn't
accept such a castrated internet connection (and lord, do I sometimes
hate the one at work, where I'm in charge of the filtering myself ;-)).
Greetings, Eric
28 May
28 May
5:53 a.m.
Hi,
I can confirm, for the last few days Coditel has been blocking outgoing
connection to port 25 to ANY machine !!!
Since this morning they are at least allowing connections to their
official smtp relay (smtp.coditel.net) ...... Well done guys !!!
It looks like they are trying to force their users to use only their
mail server for outgoing mail .... :-(
a+
Patrick.
On Thu, 2004-05-27 at 16:50, Eric Dondelinger wrote:
Hi Serge,
--
Patrick LEMMERS
http://patrick.lemmers.be
patrick(a)lemmers.be
Latest survey shows that 3 out of 4 people make up 75% of the world's
population.
For the past 4 weeks there have been increasing
problems, first my mails
seemed to be rejected by Sendar for some obscure "IP forwarding" question
and Thierry helped me with that. I had to fix my parameters in Ximian
Evolution and Kmail (I'm using both, yes, different e-mail adresses,
different "identities", different repositories etc...)
?? Sounds strange. -v please (maybe at the meeting tonight)
The last time I was able to send myil from my
normal account was on Sunday
night, since then all I get is some error message saying "unable to
connect to sendar port 25".
Try this:
(as root), run tcpdump
(as anyone), telnet sendar.prophecy.lu 25
Check the tcpdump - you'll see the outgoing packets from your machine
to sendar, you should also see the replies coming. If nothing comes
back (not even ACKs), chances are your traffic is being dropped on
the way - question is where.
Oh yes, if the telnet works, you'll see this:
bash-2.05b$ telnet sendar.prophecy.lu 25
Trying 213.166.63.242...
Connected to sendar.prophecy.lu.
Escape character is '^]'.
220-sendar.prophecy.lu ESMTP Sendmail 8.12.10 ready at Thu, 27 May 2004
16:50:02 +0200
220 No Spam please!
(close via "quit")
Also try this (as root):
nmap -p 25 sendar.prophecy.lu
You should get:
root # nmap -p 25 sendar.prophecy.lu
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-05-27 16:32 CEST
Interesting ports on sendar.prophecy.lu (213.166.63.242):
PORT STATE SERVICE
25/tcp open smtp
If it says filtered instead of open, again, we'll know packets are
being dropped on the way. If it says closed, the packets are not
dropped but rejected.
I _am_ able to retrieve my mails from Sendar
though and I do receive
e-mails on each of my e-mail adresses.
Different port...
I called Thierry and we checked a few things and
it doesn't seem to come
from Sendar, so I called the Coditel (un)help-line to inquire. As usual
they at first considered I might have problems with Outlook or perhaps a
trojan on my system, I explained that neither Kmail, nor Evolution, nor
Linux are all that suscpetible to windows virii (they were actually
understanding about that) and said there have been "several" reports of
users having trouble sending e-mail, they were surprised though that I
_am_ able to send e-mail with my Coditel account (surprise, this works)
... which I assume you're sending via the Coditel mailserver?
Note: whatever mail you're sending out, you're _always_ supposed
to go through your ISP's mailserver. If you're trying to deliver
mail directly, chances are that the recipient's mailserver will
see your IP as belonging to a DUL (dial-up list), and thus refuse
to talk to you (as much spam comes from dialups, be that analog,
ISDN, dsl or cable).
A From: (or envelope Mail From:) is easily forged, so if the
server allows you to send mail based on that only, it's to be
considered an open relay. If it uses pop-before-smtp or smtp-auth,
things look better.
Now, when trying the above - get Thierry to have a tcpdump
running on his firewall (I bet there must be one ;-)) to see
whether the packet arrives there. Give him your IP address
first, so he can filter directly for your traffic. A short
phone call will make sure it's no problem on TC's end.
3) Sendar responds to ping, but I can't ssh
to Sendar either, might be
similar filtering from Coditel, how can I investigate this?
IMHO that would fit the bill.
4) any other suggestions
Ask Coditel whether they are filtering traffic. Ask them whether
they block outbound SMTP traffic (unless going through their
mailserver - this makes a lot of sense, considering all the mail
resp. Outlook viruses as well as spam), ask them whether they
filter anything else, whether they force your HTTP traffic
through a proxy etc.
I can very much symphathize with them if they are filtering
outbound SMTP traffic (I'm seriously considering this measure
@work), I can understand if they use a web proxy, I very much
understand if they drop ports 137-139 traffic (SMB), but they
certainly should bloody leave alone an SSH port (22).
Note, I can symphatize/understand this, but if they do it, they
should inform their customers, and offer their clued customers (tm)
[not that there are many] a way around this. Personally, I wouldn't
accept such a castrated internet connection (and lord, do I sometimes
hate the one at work, where I'm in charge of the filtering myself ;-)).
Greetings, Eric
_______________________________________________
Lilux-help mailing list
Lilux-help(a)lilux.lu
http://lilux.lu/mailman/listinfo/lilux-help
6:12 a.m.
Hi,
On 28 May 2004, Patrick LEMMERS wrote:
I can confirm, for the last few days Coditel has been
blocking outgoing
connection to port 25 to ANY machine !!!
Ouch? Even their own mailserver?!? If that's the case, somebody
royally screwed up...
Since this morning they are at least allowing
connections to their
official smtp relay (smtp.coditel.net) ...... Well done guys !!!
Hmm... looks like a sensible anti-virus-spreading and anti-spamming-
from-their-own-network technique to me.
It looks like they are trying to force their users to
use only their
mail server for outgoing mail .... :-(
Yup, and as a SysOp, I can feel their pain. IMHO they're better
off this way, dealing with the wrath of a very few clued customers,
instead of dealing with thousands of abuse messages because of
viruses and/or spam.
Depending on their implementation, they possibly could adjust
filter settings based on authentication, so maybe they could
offer "100% free-as-in-speech" access to the 'net to a select
few people. If you can guarantee them you'll never catch an
MS Windows-based virus, maybe they'll let you have that setting ;-)
I do agree that they should inform their customers about such
measures, and they'll have to guarantee excellent availability
on their mailserver.
Greetings, Eric
8:23 a.m.
Yup, and as a SysOp, I can feel their pain. IMHO
they're better
off this way, dealing with the wrath of a very few clued customers,
instead of dealing with thousands of abuse messages because of
viruses and/or spam.
Depending on their implementation, they possibly could adjust
filter settings based on authentication, so maybe they could
offer "100% free-as-in-speech" access to the 'net to a select
few people. If you can guarantee them you'll never catch an
MS Windows-based virus, maybe they'll let you have that setting ;-)
yes and no.
it is unacceptabel of a provider to just disable ports and force you to use
their servers, without telling anybody about it.
even if they told anybody about it, it was unacceptable to me, because i don't
want to use THEIR servers...
anyway, as i wrote before, i can confirm that coditel hasn't done so, at least
not for me.
--
regards,
Georges Toth
8:18 a.m.
hi,
i'm using coditel as well, and "I" can confirm that everything works as
usual!!!
i don't use the coditel mail service, i use other smtp servers.
and those work and have never stoped from working.
you seem to have some other problem, OR coditel is blocking that port on you
both?
but i don't see why they should do that....
On Friday 28 May 2004 07:53, Patrick LEMMERS wrote:
Hi,
I can confirm, for the last few days Coditel has been blocking outgoing
connection to port 25 to ANY machine !!!
Since this morning they are at least allowing connections to their
official smtp relay (smtp.coditel.net) ...... Well done guys !!!
It looks like they are trying to force their users to use only their
mail server for outgoing mail .... :-(
a+
Patrick.
On Thu, 2004-05-27 at 16:50, Eric Dondelinger wrote:
> Hi Serge,
>
> > For the past 4 weeks there have been increasing problems, first my
> > mails seemed to be rejected by Sendar for some obscure "IP
forwarding"
> > question and Thierry helped me with that. I had to fix my parameters
> > in Ximian Evolution and Kmail (I'm using both, yes, different e-mail
> > adresses, different "identities", different repositories etc...)
>
> ?? Sounds strange. -v please (maybe at the meeting tonight)
>
> > The last time I was able to send myil from my normal account was on
> > Sunday night, since then all I get is some error message saying "unable
> > to connect to sendar port 25".
>
> Try this:
> (as root), run tcpdump
> (as anyone), telnet sendar.prophecy.lu 25
> Check the tcpdump - you'll see the outgoing packets from your machine
> to sendar, you should also see the replies coming. If nothing comes
> back (not even ACKs), chances are your traffic is being dropped on
> the way - question is where.
>
> Oh yes, if the telnet works, you'll see this:
> bash-2.05b$ telnet sendar.prophecy.lu 25
> Trying 213.166.63.242...
> Connected to sendar.prophecy.lu.
> Escape character is '^]'.
> 220-sendar.prophecy.lu ESMTP Sendmail 8.12.10 ready at Thu, 27 May 2004
> 16:50:02 +0200
> 220 No Spam please!
>
> (close via "quit")
>
>
> Also try this (as root):
> nmap -p 25 sendar.prophecy.lu
> You should get:
> root # nmap -p 25 sendar.prophecy.lu
>
> Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-05-27 16:32
> CEST Interesting ports on sendar.prophecy.lu (213.166.63.242):
> PORT STATE SERVICE
> 25/tcp open smtp
>
> If it says filtered instead of open, again, we'll know packets are
> being dropped on the way. If it says closed, the packets are not
> dropped but rejected.
>
> > I _am_ able to retrieve my mails from Sendar though and I do receive
> > e-mails on each of my e-mail adresses.
>
> Different port...
>
> > I called Thierry and we checked a few things and it doesn't seem to
> > come from Sendar, so I called the Coditel (un)help-line to inquire. As
> > usual they at first considered I might have problems with Outlook or
> > perhaps a trojan on my system, I explained that neither Kmail, nor
> > Evolution, nor Linux are all that suscpetible to windows virii (they
> > were actually understanding about that) and said there have been
> > "several" reports of users having trouble sending e-mail, they were
> > surprised though that I _am_ able to send e-mail with my Coditel
> > account (surprise, this works)
>
> ... which I assume you're sending via the Coditel mailserver?
>
> Note: whatever mail you're sending out, you're _always_ supposed
> to go through your ISP's mailserver. If you're trying to deliver
> mail directly, chances are that the recipient's mailserver will
> see your IP as belonging to a DUL (dial-up list), and thus refuse
> to talk to you (as much spam comes from dialups, be that analog,
> ISDN, dsl or cable).
> A From: (or envelope Mail From:) is easily forged, so if the
> server allows you to send mail based on that only, it's to be
> considered an open relay. If it uses pop-before-smtp or smtp-auth,
> things look better.
>
> Now, when trying the above - get Thierry to have a tcpdump
> running on his firewall (I bet there must be one ;-)) to see
> whether the packet arrives there. Give him your IP address
> first, so he can filter directly for your traffic. A short
> phone call will make sure it's no problem on TC's end.
>
> > 3) Sendar responds to ping, but I can't ssh to Sendar either, might be
> > similar filtering from Coditel, how can I investigate this?
>
> IMHO that would fit the bill.
>
> > 4) any other suggestions
>
> Ask Coditel whether they are filtering traffic. Ask them whether
> they block outbound SMTP traffic (unless going through their
> mailserver - this makes a lot of sense, considering all the mail
> resp. Outlook viruses as well as spam), ask them whether they
> filter anything else, whether they force your HTTP traffic
> through a proxy etc.
>
> I can very much symphathize with them if they are filtering
> outbound SMTP traffic (I'm seriously considering this measure
> @work), I can understand if they use a web proxy, I very much
> understand if they drop ports 137-139 traffic (SMB), but they
> certainly should bloody leave alone an SSH port (22).
>
> Note, I can symphatize/understand this, but if they do it, they
> should inform their customers, and offer their clued customers (tm)
> [not that there are many] a way around this. Personally, I wouldn't
> accept such a castrated internet connection (and lord, do I sometimes
> hate the one at work, where I'm in charge of the filtering myself ;-)).
>
> Greetings, Eric
>
> _______________________________________________
> Lilux-help mailing list
> Lilux-help(a)lilux.lu
> http://lilux.lu/mailman/listinfo/lilux-help
--
regards,
Georges Toth
10:45 a.m.
i'm using coditel as well, and "I" can
confirm that everything works as
usual!!!
Yes but you are on their static network:
Received: from simon.lan (cable-212.76.255.43.static.coditel.net
[212.76.255.43] ....
I used to have an IP on that same network (although I never requested !)
until last weekend and never had any problem.
My ip changed on sunday night and since then I could connect to any
machines on port 25 ....
i don't use the coditel mail service, i use other
smtp servers.
and those work and have never stoped from working.
you seem to have some other problem, OR coditel is blocking that port on you
both?
but i don't see why they should do that....
On Friday 28 May 2004 07:53, Patrick LEMMERS wrote:
--
Patrick LEMMERS
patrick(a)lemmers.be
http://patrick.lemmers.be
Linux is like an indian tent: No Gates, no windows and an apache inside.
Hi,
I can confirm, for the last few days Coditel has been blocking outgoing
connection to port 25 to ANY machine !!!
Since this morning they are at least allowing connections to their
official smtp relay (smtp.coditel.net) ...... Well done guys !!!
It looks like they are trying to force their users to use only their
mail server for outgoing mail .... :-(
a+
Patrick.
On Thu, 2004-05-27 at 16:50, Eric Dondelinger wrote:
> Hi Serge,
>
> > For the past 4 weeks there have been increasing problems, first my
> > mails seemed to be rejected by Sendar for some obscure "IP
forwarding"
> > question and Thierry helped me with that. I had to fix my parameters
> > in Ximian Evolution and Kmail (I'm using both, yes, different e-mail
> > adresses, different "identities", different repositories etc...)
>
> ?? Sounds strange. -v please (maybe at the meeting tonight)
>
> > The last time I was able to send myil from my normal account was on
> > Sunday night, since then all I get is some error message saying "unable
> > to connect to sendar port 25".
>
> Try this:
> (as root), run tcpdump
> (as anyone), telnet sendar.prophecy.lu 25
> Check the tcpdump - you'll see the outgoing packets from your machine
> to sendar, you should also see the replies coming. If nothing comes
> back (not even ACKs), chances are your traffic is being dropped on
> the way - question is where.
>
> Oh yes, if the telnet works, you'll see this:
> bash-2.05b$ telnet sendar.prophecy.lu 25
> Trying 213.166.63.242...
> Connected to sendar.prophecy.lu.
> Escape character is '^]'.
> 220-sendar.prophecy.lu ESMTP Sendmail 8.12.10 ready at Thu, 27 May 2004
> 16:50:02 +0200
> 220 No Spam please!
>
> (close via "quit")
>
>
> Also try this (as root):
> nmap -p 25 sendar.prophecy.lu
> You should get:
> root # nmap -p 25 sendar.prophecy.lu
>
> Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-05-27 16:32
> CEST Interesting ports on sendar.prophecy.lu (213.166.63.242):
> PORT STATE SERVICE
> 25/tcp open smtp
>
> If it says filtered instead of open, again, we'll know packets are
> being dropped on the way. If it says closed, the packets are not
> dropped but rejected.
>
> > I _am_ able to retrieve my mails from Sendar though and I do receive
> > e-mails on each of my e-mail adresses.
>
> Different port...
>
> > I called Thierry and we checked a few things and it doesn't seem to
> > come from Sendar, so I called the Coditel (un)help-line to inquire. As
> > usual they at first considered I might have problems with Outlook or
> > perhaps a trojan on my system, I explained that neither Kmail, nor
> > Evolution, nor Linux are all that suscpetible to windows virii (they
> > were actually understanding about that) and said there have been
> > "several" reports of users having trouble sending e-mail, they were
> > surprised though that I _am_ able to send e-mail with my Coditel
> > account (surprise, this works)
>
> ... which I assume you're sending via the Coditel mailserver?
>
> Note: whatever mail you're sending out, you're _always_ supposed
> to go through your ISP's mailserver. If you're trying to deliver
> mail directly, chances are that the recipient's mailserver will
> see your IP as belonging to a DUL (dial-up list), and thus refuse
> to talk to you (as much spam comes from dialups, be that analog,
> ISDN, dsl or cable).
> A From: (or envelope Mail From:) is easily forged, so if the
> server allows you to send mail based on that only, it's to be
> considered an open relay. If it uses pop-before-smtp or smtp-auth,
> things look better.
>
> Now, when trying the above - get Thierry to have a tcpdump
> running on his firewall (I bet there must be one ;-)) to see
> whether the packet arrives there. Give him your IP address
> first, so he can filter directly for your traffic. A short
> phone call will make sure it's no problem on TC's end.
>
> > 3) Sendar responds to ping, but I can't ssh to Sendar either, might be
> > similar filtering from Coditel, how can I investigate this?
>
> IMHO that would fit the bill.
>
> > 4) any other suggestions
>
> Ask Coditel whether they are filtering traffic. Ask them whether
> they block outbound SMTP traffic (unless going through their
> mailserver - this makes a lot of sense, considering all the mail
> resp. Outlook viruses as well as spam), ask them whether they
> filter anything else, whether they force your HTTP traffic
> through a proxy etc.
>
> I can very much symphathize with them if they are filtering
> outbound SMTP traffic (I'm seriously considering this measure
> @work), I can understand if they use a web proxy, I very much
> understand if they drop ports 137-139 traffic (SMB), but they
> certainly should bloody leave alone an SSH port (22).
>
> Note, I can symphatize/understand this, but if they do it, they
> should inform their customers, and offer their clued customers (tm)
> [not that there are many] a way around this. Personally, I wouldn't
> accept such a castrated internet connection (and lord, do I sometimes
> hate the one at work, where I'm in charge of the filtering myself ;-)).
>
> Greetings, Eric
>
> _______________________________________________
> Lilux-help mailing list
> Lilux-help(a)lilux.lu
> http://lilux.lu/mailman/listinfo/lilux-help
--
regards,
Georges Toth
_______________________________________________
Lilux-help mailing list
Lilux-help(a)lilux.lu
http://lilux.lu/mailman/listinfo/lilux-help
1:03 p.m.
On Fri, 2004-05-28 at 14:18, Georges Toth wrote:
I couldn't be bothered. I hate helldesks !
I just configured one of my server at work to accept relaying on port 24
for my ip address ... ;-)
But I guess I'll have to resort to use their own mail relay one day. :-(
A+
Patrick.
I used to have
an IP on that same network (although I never requested !)
until last weekend and never had any problem.
My ip changed on sunday night and since then I could connect to any
machines on port 25 ....
call their help desk and ask them? 
9:37 p.m.
>call their help desk and ask them?
Coditel did block port 25 for all outgoing mail since Monday for my IP
address! I tried 'telnet servername 25' for a half a dozen SMTP servers
and none of them worked! My mail provider (german provider Puretec)
offers the alternative port 587 (RFC conformant) for SMTP. So I switched
to this port and everything worked again! The Putetec FAQ also tells the
reason why they offer the alternative port 587: Blocking port 25 seems
to be very popular especially at universities according the Puretec FAQ.
I consulted the Coditel FAQ to see if they mention this. Nothing. So I
telephoned to the helpline. I told them that I didn't appreciate ISPs
who block important ports without mentioning it in their FAQ and that
there are many people who own their own E-Mail addresses and who don't
want to use a coditel address. The helpdesk told me that they will
forward my complaint to their administrators!
This evening I checked again. Port 25 is open again (at least for me)
Patrick Kaell
9:32 p.m.
Patrick LEMMERS wrote:
Hi,
I can confirm, for the last few days Coditel has been blocking outgoing
connection to port 25 to ANY machine !!!
Since this morning they are at least allowing connections to their
official smtp relay (smtp.coditel.net) ...... Well done guys !!!
Same situation for me; thanks for the hint, I simply did not even think
of this !
Jean-Jacques MOURIS
27 May
27 May
7:58 p.m.
"Serge R. Marelli" wrote:
Hi,
Thanks ${DEITY} there is webmail.
Background information :
I've been having problems sending e-mails for the past 4 days.
I'm using Coditel cable as my ISP, so far it was working OK, almost no
problem.
I also have trouble sending email, Netscape completely locks up when
sending a mail.
I also notice that these last days, my IP changed: 2 Ips in 2 days (for
some weeks before, my adress had been unchanged) , with one being
completely out of the range they told me being their standard IP ranges
for dynamic adresses: normal ranges should be:
212.76.252.0/24
212.76.253.0/24
212.76.254.0/24
212.76.255.0/24
Today they gave me 213.214.47.xxx
This causes other trouble to me, as I have a ssh-acces to some server,
which is only accessible through the above IP-ranges.
Apparentely, they are really having problems over there.
Jean-Jacques MOURIS
1 Jun
1 Jun
12:53 p.m.
In the end it seems I'm now able to send e-mail again...
Thanks to Eric for a suggestion "off-list", I'm now sending my LiLux
mails through the Coditel smtp swerver and reassigning the FROM field to
my LiLux adress...
In a first phase, Coditel had blocked this about a month ago (that's
when I started having problems) and after a chat with Thierry I'd
started using Sendar as my smtp swerver...
Now they block "outside" smtp but allow (l)users to reassign the FROM
adress go figure.
Serge
On Thu, 2004-05-27 at 15:45, Serge R. Marelli wrote:
Hi,
Thanks ${DEITY} there is webmail.
Background information :
I've been having problems sending e-mails for the past 4 days.
I'm using Coditel cable as my ISP, so far it was working OK, almost no
problem.
Symptoms :
For the past 4 weeks there have been increasing problems, first my mails
seemed to be rejected by Sendar for some obscure "IP forwarding" question
and Thierry helped me with that. I had to fix my parameters in Ximian
Evolution and Kmail (I'm using both, yes, different e-mail adresses,
different "identities", different repositories etc...)
The last time I was able to send myil from my normal account was on Sunday
night, since then all I get is some error message saying "unable to
connect to sendar port 25".
I _am_ able to retrieve my mails from Sendar though and I do receive
e-mails on each of my e-mail adresses.
I called Thierry and we checked a few things and it doesn't seem to come
from Sendar, so I called the Coditel (un)help-line to inquire. As usual
they at first considered I might have problems with Outlook or perhaps a
trojan on my system, I explained that neither Kmail, nor Evolution, nor
Linux are all that suscpetible to windows virii (they were actually
understanding about that) and said there have been "several" reports of
users having trouble sending e-mail, they were surprised though that I
_am_ able to send e-mail with my Coditel account (surprise, this works)
Since I'm not all too confident they'll find a solution fast enough for my
(and Lilux's) needs I want to ask you guys
1) are there other people here who'd be using Coditel cable ISP ? do you
have similar problems?
2) where (and how) can I find/activate the logs so I can actually check
what's happening when my system's trying to connect to Sendar's port 25?
3) Sendar responds to ping, but I can't ssh to Sendar either, might be
similar filtering from Coditel, how can I investigate this?
4) any other suggestions
Any help will be appreciated, printed if possible, applied to find the
reason, the bill will be sent to Coditel and funding given to LiLux ;))
thanks
Serge
----------------------------------------------------------------------
'Software patents kill technical innovation"
----------------------------------------------------------------------
Serge Marelli,
E-mail : serge.marelli(a)linux.lu
----------------------------------------------------------------------
LiLux : http://www.linux.lu/
Protecting Innovation against Patent Inflation
http://swpat.ffii.org/
over 200,000 votes & 2000 firms against software patents
http://noepatents.org/
_______________________________________________
Lilux-help mailing list
Lilux-help(a)lilux.lu
http://lilux.lu/mailman/listinfo/lilux-help
--
----------------------------------------------------------------------
Serge Marelli, Luxembourg
E-mail : serge.marelli(a)linux.lu
----------------------------------------------------------------------
LiLux, Luxembourg LUG : http://www.linux.lu/
Defending Innovation against Patent Inflation http://swpat.ffii.org/
1:10 p.m.
begin Tuesday 01 June 2004 14:53, Serge Marelli quote:
In the end it seems I'm now able to send e-mail
again...
Thanks to Eric for a suggestion "off-list", I'm now sending my LiLux
mails through the Coditel smtp swerver and reassigning the FROM field to
my LiLux adress...
In a first phase, Coditel had blocked this about a month ago (that's
when I started having problems) and after a chat with Thierry I'd
started using Sendar as my smtp swerver...
Now they block "outside" smtp but allow (l)users to reassign the FROM
adress go figure.
Serge
Shouldn't we open port 587 (MSA - mail submission agent) on sendar for
this purpose?
This port is equivalent to 25, apart that it is intended for initial
mail submission, rather than for MTA-to-MTA communication.
Connections to MSA are supported to be authenticated (SMTP AUTH), and
this should be enough to prevent any spam problems using this port.
ISPs are thus supposed not to inferfere with 587.
Alain
7291
days inactive
7296
days old
13 comments
8 participants
participants (8)
-
Alain Knaff -
Eric Dondelinger -
Georges Toth -
Jean-Jacques Mouris -
Patrick Kaell -
Patrick LEMMERS -
Serge Marelli -
Serge R. Marelli