Как сделать, чтобы можно было отсылать почту с сервака (postfix) из интернета? В локальной сети всё работает.
nmap:
PORT STATE SERVICE VERSION 21/tcp open ftp PureFTPd 22/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0) 80/tcp open http nginx 0.6.32 143/tcp open imap Dovecot imapd 3389/tcp open microsoft-rdp Microsoft Terminal Service
iptables:
# Generated by iptables-save v1.4.2 on Mon Dec 26 02:32:07 2011 *nat :PREROUTING ACCEPT [9032017:594860121] :POSTROUTING ACCEPT [259268:26606646] :OUTPUT ACCEPT [402162:39237840] -A PREROUTING -d ВНЕШНИЙ_IP/32 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 10.6.2.1:3389 -A POSTROUTING -o eth0 -j MASQUERADE -A POSTROUTING -o tun+ -j MASQUERADE COMMIT # Completed on Mon Dec 26 02:32:07 2011 # Generated by iptables-save v1.4.2 on Mon Dec 26 02:32:07 2011 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :IN - [0:0] :VPN - [0:0] -A INPUT -i tun+ -j VPN -A INPUT -j IN -A FORWARD -i tun+ -j VPN -A FORWARD -j IN -A OUTPUT -j ACCEPT -A IN -i lo -j ACCEPT -A IN -i eth1 -j ACCEPT -A IN -m state --state RELATED,ESTABLISHED -j ACCEPT -A IN -p icmp -m icmp --icmp-type 3 -j ACCEPT -A IN -p icmp -m icmp --icmp-type 11 -j ACCEPT -A IN -p icmp -m icmp --icmp-type 12 -j ACCEPT -A IN -p icmp -m icmp --icmp-type 8 -j ACCEPT -A IN -s 64.233.192.0/18 -p tcp -m tcp --dport 21 -j DROP -A IN -s 64.233.192.0/18 -p udp -m udp --dport 21 -j DROP -A IN -s 91.121.0.0/16 -p tcp -m tcp --dport 21 -j DROP -A IN -s 91.121.0.0/16 -p udp -m udp --dport 21 -j DROP -A IN -p tcp -m tcp --dport 21 -j ACCEPT -A IN -p udp -m udp --dport 21 -j ACCEPT -A IN -p tcp -m tcp --dport 30000:50000 -j ACCEPT -A IN -p udp -m udp --dport 30000:50000 -j ACCEPT -A IN -s 64.233.192.0/18 -p tcp -m tcp --dport 22 -j DROP -A IN -s 91.121.0.0/16 -p tcp -m tcp --dport 22 -j DROP -A IN -p tcp -m tcp --dport 22 -j ACCEPT -A IN -p tcp -m tcp --dport 25 -j ACCEPT -A IN -p tcp -m tcp --dport 80 -j ACCEPT -A IN -p tcp -m tcp --dport 143 -j ACCEPT -A IN -p tcp -m tcp --dport 3389 -j ACCEPT -A IN -j DROP -A VPN -j ACCEPT -A VPN -j DROP COMMIT # Completed on Mon Dec 26 02:32:07 2011
