Hi, so, hab die VM nochmal in das andere Subnetz umgezogen (genau genommen sind es zwei NICs mit unterschiedlichen Subnetzen aber Routing/Gateway sollte passen)
`root@mail01:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy DROP)
target prot opt source destination
MAILCOW all – anywhere anywhere /* mailcow */
DOCKER-USER all – anywhere anywhere
DOCKER-ISOLATION-STAGE-1 all – anywhere anywhere
ACCEPT all – anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all – anywhere anywhere
ACCEPT all – anywhere anywhere
ACCEPT all – anywhere anywhere
ACCEPT all – anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all – anywhere anywhere
ACCEPT all – anywhere anywhere
ACCEPT all – anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain DOCKER (2 references)
target prot opt source destination
ACCEPT tcp – anywhere 172.22.1.253 tcp dpt:smtp
ACCEPT tcp – anywhere 172.22.1.2 tcp dpt:mysql
ACCEPT tcp – anywhere 172.22.1.253 tcp dpt:submissions
ACCEPT tcp – anywhere 172.22.1.253 tcp dpt:submission
ACCEPT tcp – anywhere 172.22.1.7 tcp dpt:http
ACCEPT tcp – anywhere 172.22.1.7 tcp dpt:https
ACCEPT tcp – anywhere 172.22.1.249 tcp dpt:redis
ACCEPT tcp – anywhere 172.22.1.13 tcp dpt:8983
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:pop3
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:imap2
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:imaps
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:pop3s
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:sieve
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:12345
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target prot opt source destination
DOCKER-ISOLATION-STAGE-2 all – anywhere anywhere
DOCKER-ISOLATION-STAGE-2 all – anywhere anywhere
RETURN all – anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-2 (2 references)
target prot opt source destination
DROP all – anywhere anywhere
DROP all – anywhere anywhere
RETURN all – anywhere anywhere
Chain DOCKER-USER (1 references)
target prot opt source destination
RETURN all – anywhere anywhere
Chain MAILCOW (1 references)
target prot opt source destination
DROP tcp – anywhere anywhere /* mailcow isolation */`
Und hier netstat:
root@mail01:~# netstat -tulpen
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 0 13690 853/docker-proxy
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 0 14151 1239/docker-proxy
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 0 14168 1277/docker-proxy
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 0 13884 1022/docker-proxy
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 0 13679 837/docker-proxy
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 12981 482/sshd: /usr/sbin
tcp 0 0 127.0.0.1:19991 0.0.0.0:* LISTEN 0 14302 1395/docker-proxy
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 0 13670 831/docker-proxy
tcp 0 0 127.0.0.1:13306 0.0.0.0:* LISTEN 0 14522 862/docker-proxy
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 0 14607 1030/docker-proxy
tcp 0 0 0.0.0.0:4190 0.0.0.0:* LISTEN 0 14293 1320/docker-proxy
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 0 14180 1291/docker-proxy
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 0 14194 1306/docker-proxy
tcp 0 0 127.0.0.1:7654 0.0.0.0:* LISTEN 0 14765 1153/docker-proxy
tcp 0 0 127.0.0.1:18983 0.0.0.0:* LISTEN 0 14138 1228/docker-proxy
tcp6 0 0 :::22 :::* LISTEN 0 12992 482/sshd: /usr/sbin
- Mailcow Web GUI geht
- SSH geht
- SMTP geht (bekomme via Telnet ne Antwort)
- /sogo geht auch
Nur: IMAP geht nicht. Kein Timeout sondern “Verbindung verweigert”
Eine andere Firewall außer iptables hab ich nicht
Selbst vom Server selbst auf dei eigene (neue) IP kommt sofort eine Connection refused
root@mail01:~# telnet 192.168.168.20 993
Trying 192.168.168.20...
telnet: Unable to connect to remote host: Connection refused
während SMTP sofort geht:
root@mail01:~# telnet 192.168.168.20 25
Trying 192.168.168.20...
Connected to 192.168.168.20.
Escape character is '^]'.
220 mail01.x.y ESMTP Postcow