From owner-freebsd-questions@FreeBSD.ORG Mon Feb 27 17:00:46 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BF08F106566B for ; Mon, 27 Feb 2012 17:00:46 +0000 (UTC) (envelope-from chris_bender@cellularatsea.com) Received: from wireless.icgws.com (wireless.icgws.com [198.211.94.23]) by mx1.freebsd.org (Postfix) with ESMTP id 80E8B8FC18 for ; Mon, 27 Feb 2012 17:00:46 +0000 (UTC) Received: by wireless.icgws.com (Postfix, from userid 1003) id 9E8A5180DCA; Mon, 27 Feb 2012 11:59:48 -0500 (EST) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on wireless.icgws.com X-Spam-Level: X-Spam-Status: No, score=-2.9 required=3.5 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.3.1 Received: from wmstp.corp.cellularatsea.com (unknown [10.200.250.42]) by wireless.icgws.com (Postfix) with SMTP id 651C5180D25; Mon, 27 Feb 2012 11:59:47 -0500 (EST) Received: from wmstp.corp.wms.cellularatsea.com (localhost [127.0.0.1]) by wmstp.corp.cellularatsea.com (Postfix) with SMTP id 922ACB1885D; Mon, 27 Feb 2012 12:00:44 -0500 (EST) Received: from wmsexg01.corp.cellularatsea.com ([10.200.104.15] helo=wmsexg01.corp.cellularatsea.com) by wmstp.corp.wms.cellularatsea.com with SMTP (ASSP 1.9.1.1); 27 Feb 2012 12:00:44 -0500 X-Ninja-PIM: Scanned by Ninja X-MimeOLE: Produced By Microsoft Exchange V6.5 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-class: urn:content-classes:message x-vipre-scanned: 1021FDB3002D4D1021FF00 Date: Mon, 27 Feb 2012 12:00:43 -0500 Message-ID: In-Reply-To: <4F4BB61A.1060600@radel.com> Thread-Topic: Email issues, relay failure Thread-Index: Acz1cP1DAMqrc42YSSCbJ5xM8yHO1gAACQng References: <863259E16B6C464DAD1E9DD10BB31154059CFBAE@wmsexg01.corp.cellularatsea.com> <4F48BAF6.9070204@ifdnrg.com> <863259E16B6C464DAD1E9DD10BB31154059CFBE7@wmsexg01.corp.cellularatsea.com> <4F48EC21.7040805@ifdnrg.com> <863259E16B6C464DAD1E9DD10BB31154059CFBEE@wmsexg01.corp.cellularatsea.com> <4F48F45F.4080304@ifdnrg.com> <863259E16B6C464DAD1E9DD10BB31154059CFBF4@wmsexg01.corp.cellularatsea.com> <4F492262.5090505@radel.com> <7409DAB4-F76A-493B-9A50-A663E6F6802E@cellularatsea.com> <4F4BB19A.8040005@radel.com> <863259E16B6C464DAD1E9DD10BB31154059CFDA4@wmsexg01.corp.cellularatsea.com> <4F4BB61A.1060600@radel.com> From: "Bender, Chris" To: "Jon Radel" X-Assp-Whitelisted: Yes () X-Assp-Envelope-From: chris_bender@cellularatsea.com X-Assp-Intended-For: jon@radel.com X-Assp-Passing: 10.200.104.15 in acceptAllMail X-Assp-ID: wmstp.corp.wms.cellularatsea.com (33036-51455) X-Assp-Version: 1.9.1.1(1.0.00) Cc: freebsd-questions@freebsd.org Subject: RE: Email issues, relay failure X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Feb 2012 17:00:46 -0000 How would I whitelist SMTP speakers? I am thinking it would be ok to reload the rules, would that clear the issue with SMTP users for now? Whats the harm? Thanks -----Original Message----- From: Jon Radel [mailto:jon@radel.com]=20 Sent: Monday, February 27, 2012 11:58 AM To: Bender, Chris Cc: freebsd-questions@freebsd.org Subject: Re: Email issues, relay failure On 2/27/12 11:45 AM, Bender, Chris wrote: > I was thinking about just reloading the pf.conf but I have never worked > with pf so > I am worried other things might break. My thought was by doing that the > Adaptive part of the pfctl would be restarted? Any pf.conf file I've ever seen does something sensible after reload.=20 I suspect one could write something perverse that blows up on restart,=20 but that would making rebooting the machine problematic.... > > Does that make sense would reloading the rules wash the adaptive > behavior away or > Would all that still be in some sort of bruteforce file to protect the > firewall? pf can load data from files when it starts or just manage things in a=20 fashion that is transient upon restart. Hard to say what's happening= in your case w/o a clue as to what's in pf.conf. I'd suggest that you at the very least whitelist internal SMTP speakers=20 that you expect to get e-mail from on a regular basis, even if you do=20 throttling of SMTP connections in general. Much less messy.... --=20 --Jon Radel jon@radel.com