Temat: Brak możliwości wysyłania maili - Network unreachable
Cześć,
Próbowałem dziś ustawić powiadomienia mailowa z mojego domowego proxmoxa. Przy probie wysłania maila mam "Network unreachable" - serwer ma internet - pobiera bez problemu aktualizacje. Z komputera podłączanego VPNem do domu (próbując: "telnet smtp.gmail.com 587") mam to samo. Bez VPNa (sieć komórkowa) działa. Bezpośrednio z routera rownież to samo.
Pomyślałem, że może mam bałagan na firewallu, ale na moje "oko" wydaje mi się ze wszystko jest ok. Możliwe żeby ISP blokował takie rzeczy? Mam tez podobny problem z inna aplikacją do której nie mogę łączyć się bezpośrednio i muszę skakać po VPNie.
Myślałem o resecie routera do ustawień fabrycznych i wtedy jeszcze spróbować, ale może wy coś zauważycie w configu co przeszkadza.
Można w jakiś prosty sposób (jedna-dwoma komendami) dezaktywować na chwile do testu firewalla na routerze, żeby sprawdzić czy to ISP czy firewall?
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option input 'ACCEPT'
option output 'ACCEPT'
option synflood_protect '1'
option forward 'REJECT'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
option input 'REJECT'
list network 'wan'
list network 'wan6'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config include
option path '/etc/firewall.user'
config zone
option name 'guest'
option output 'ACCEPT'
option input 'REJECT'
option forward 'REJECT'
list network 'guest'
config forwarding
option src 'guest'
option dest 'wan'
config rule
option src 'guest'
option proto 'udp'
option src_port '67-68'
option dest_port '67-68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option src 'guest'
option dest_port '53'
option target 'ACCEPT'
option family 'ipv4'
list proto 'tcp'
list proto 'udp'
config rule
option src 'wan'
option target 'ACCEPT'
option proto 'udp'
option dest_port 'xxxxx'
option name 'wireguard'
config zone
option name 'wg'
option input 'ACCEPT'
option forward 'ACCEPT'
option output 'ACCEPT'
option masq '1'
option network 'wg0'
config forwarding
option src 'wg'
option dest 'wan'
config forwarding
option src 'wan'
option dest 'wg'
config forwarding
option src 'wg'
option dest 'lan'
config forwarding
option src 'lan'
option dest 'wg'
config zone
option name 'proxmox'
option output 'ACCEPT'
list network 'proxmox'
option input 'REJECT'
option forward 'REJECT'
config forwarding
option src 'proxmox'
option dest 'wan'
config rule
option src 'proxmox'
option dest_port '53'
option target 'ACCEPT'
option family 'ipv4'
list proto 'tcp'
list proto 'udp'
config rule
list proto 'udp'
option src 'proxmox'
option dest_port '67-68'
option target 'ACCEPT'
config forwarding
option src 'wg'
option dest 'proxmox'
config forwarding
option src 'proxmox'
option dest 'wg'
config forwarding
option src 'lan'
option dest 'proxmox'
config zone
option name 'robocza'
option output 'ACCEPT'
list network 'Robocza'
option input 'ACCEPT'
option forward 'ACCEPT'
config forwarding
option src 'robocza'
option dest 'wan'
config forwarding
option src 'wan'
option dest 'robocza'