Amavis IP and ports required for correct operation.

[Matus UHLAR - fantomas]

On 03.11.20 08:39, armindo.costa at digitese.pt wrote:
>Many rejection lines related to IP 208.83.137.117 and 208.83.137.118 appear
>in the log, on a CentOS postfix e-mail server. Does the Amavis service need
>to communicate with these addresses and ports?

why do you block outgoing communication?

>Additional information:
>
>grep "208.83.137." messages
>Oct 29 18:25:22 myserver kernel: DENY IN= OUT=External SRC=MYSERVERIP
>DST=208.83.137.117 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=20781 DF PROTO=TCP
>SPT=53858 DPT=2703 WINDOW=29200 RES=0x00 SYN URGP=0
>or
>Oct 29 18:25:22 myserver kernel: DENY IN= OUT=External SRC=MYSERVERIP
>DST=208.83.137.118 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=20781 DF PROTO=TCP
>SPT=53858 DPT=2703 WINDOW=29200 RES=0x00 SYN URGP=0
>
>
>netstat -atnp | grep "208.83.137.118"
>tcp        0      1 MYSERVERIP:53418    208.83.137.118:2703     SYN_SENT
>7620/amavisd (ch7-0

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
99 percent of lawyers give the rest a bad name.