Mailing List Archive: exim: users

Connection refused.

Index | Next | Previous | View Threaded

bbowler at bigelow

Jun 21, 2012, 11:36 AM

Post #1 of 5 (877 views)
Permalink

Connection refused.

I sent this before I was subscribed, so don't know if it was
"accepted". Please delete one or the other (preferable "the other" as
this one has a bit more information)...

---

I have 2 systems, one at 10.1.1.5 (CentOS 5.4, Exim 4.63) called DOC,
the other at 10.2.0.70 (Ubuntu 11.04, Exim 4.74) called NURSE.

If I attempt to send a message to NURSE from DOC, it stays in the queue
and main.log says

2012-06-21 18:01:49 1ShlhV-0001O8-R4 == bcb [at] modis
R=dnslookup T=remote_smtp defer (111): Connection refused

It's been a *long* time (10+ years) since I've had to deal with
networking and mail configs so I'm at a bit of a loss as to where to
look.

I'm reasonably certain the problem is on NURSE (that's the one that
refused the connect, clue 1 :-) and DOC can send to other systems
successfully.

Any pointers would be most appreciated.

Thanks!
Bruce

--
+-------------------+---------------------------------------------------+
Bruce Bowler | Under capitalism man exploits man; under socialism
1.202.747.3255 x503 | the reverse is true.
bbowler [at] bigelow | - Polish Proverb
+-------------------+---------------------------------------------------+

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

bbowler at bigelow

Jun 27, 2012, 8:26 AM

Post #2 of 5 (863 views)
Permalink

Re: Connection refused. [In reply to]

Sorry for the delay, got called away unexpectedly...

On Fri, 22 Jun 2012
12:08:19 +0300 Odhiambo Washington <odhiambo [at] gmail> put fingers to
keyboard and said:

>On Thu, Jun 21, 2012 at 9:36 PM, Bruce Bowler <bbowler [at] bigelow>
>wrote:
>
>> I sent this before I was subscribed, so don't know if it was
>> "accepted". Please delete one or the other (preferable "the other"
>> as this one has a bit more information)...
>>
>>
>OK.
>
>
>> ---
>>
>> I have 2 systems, one at 10.1.1.5 (CentOS 5.4, Exim 4.63) called DOC,
>> the other at 10.2.0.70 (Ubuntu 11.04, Exim 4.74) called NURSE.
>>
>> If I attempt to send a message to NURSE from DOC, it stays in the
>> queue and main.log says
>>
>> 2012-06-21 18:01:49 1ShlhV-0001O8-R4 == bcb [at] modis
>> R=dnslookup T=remote_smtp defer (111): Connection refused
>>
>
>So, login to a Unix shell on NURSE and test connectivity:
>
>ping 10.2.0.70 # Do you get replies? Or maybe firewall blocks ping
>packets?

Ping works

>telnet 10.2.0.70 25

fails w/ "telnet: Unable to connect to remote host: Connection refused"

>
>More important though:
>
>exim -bt bcb [at] modis

root [at] modi:/etc/exim4/conf.d# exim -bt bcb [at] modis
R: system_aliases for bcb [at] modis
R: hub_user for bcb [at] modis
R: smarthost for bcb [at] bigelow <<<<<<<<<<<<<<
bcb [at] bigelow
<-- bcb [at] modis
router = smarthost, transport = remote_smtp_smarthost
host ASPMX.L.GOOGLE.COM [173.194.73.27]

gmail is our "institution wide" server but this message should never
leave the campus...

>Does the output show anything to do with the IP of NURSE?
>
>If you login to NURSE and do:
>
>telnet 0 25

Same as above, connection refused...

>Does it answer???
>
>netstat -anp | grep 25

root [at] nurs:/etc/exim4/conf.d# netstat -anp | grep 25
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1134/exim4
tcp6 0 0 ::1:25 :::* LISTEN 1134/exim4

Plus more lines with IP masks w/255's and PIDs that have 25's in them

Bruce

--
+-------------------+---------------------------------------------------+
Bruce Bowler | It'll be a miracle if he ever paints again
1.202.747.3255 x503 |
bbowler [at] bigelow | -Allison Whiteside, after her husbands death
+-------------------+---------------------------------------------------+

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

odhiambo at gmail

Jun 27, 2012, 8:50 AM

Post #3 of 5 (862 views)
Permalink

Re: Connection refused. [In reply to]

On Wed, Jun 27, 2012 at 6:26 PM, Bruce Bowler <bbowler [at] bigelow> wrote:

> Sorry for the delay, got called away unexpectedly...
>

Called to heaven and back? Those were many daya:-)

[snip]

>
>So, login to a Unix shell on NURSE and test connectivity:
>
>ping 10.2.0.70 # Do you get replies? Or maybe firewall blocks ping
>packets?

Ping works

Okay.

>
> >telnet 10.2.0.70 25
>
> fails w/ "telnet: Unable to connect to remote host: Connection refused"
>

So Exim is NOT listening on that interface!

>
> >
> >More important though:
> >
> >exim -bt bcb [at] modis
>
> root [at] modi:/etc/exim4/conf.d# exim -bt bcb [at] modis
> R: system_aliases for bcb [at] modis
> R: hub_user for bcb [at] modis
> R: smarthost for bcb [at] bigelow <<<<<<<<<<<<<<
> bcb [at] bigelow
> <-- bcb [at] modis
> router = smarthost, transport = remote_smtp_smarthost
> host ASPMX.L.GOOGLE.COM [173.194.73.27]
>
> gmail is our "institution wide" server but this message should never
> leave the campus...
>

So create a router _above_ the one you have called smarthost, viz:

modis_hub_route:
driver = manual_route
domains = modis.bigelow.org
transport = remote_smtp
route_data = 10.2.0.70 25
same_domain_copy_routing
no_more

>
>
> >Does the output show anything to do with the IP of NURSE?
> >
> >If you login to NURSE and do:
> >
> >telnet 0 25
>
> Same as above, connection refused...
>
> >Does it answer???
> >
> >netstat -anp | grep 25
>
> root [at] nurs:/etc/exim4/conf.d# netstat -anp | grep 25
> tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1134/exim4
> tcp6 0 0 ::1:25 :::* LISTEN 1134/exim4
>

I think you have edited exim.conf on this machine and specified that it
should only listen on the loopback interface.
So look for the line and change it from what it is to the following:

local_interfaces = <; 127.0.0.1 ; 10.2.0.70 25

Restart the Exim instance and try the "exim -bt" and "telnet" commands from
before!

HTH
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
I can't hear you -- I'm using the scrambler.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

graeme at graemef

Jun 27, 2012, 8:54 AM

Post #4 of 5 (857 views)
Permalink

Re: Connection refused. [In reply to]

On Wed, 2012-06-27 at 11:26 -0400, Bruce Bowler wrote:
> root [at] nurs:/etc/exim4/conf.d# netstat -anp | grep 25
> tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1134/exim4
> tcp6 0 0 ::1:25 :::* LISTEN 1134/exim4

It's not listening externally (those are the IPv4 and IPv6 "localhost"
addresses).

You should configure your Exim install on NURSE to listen externally,
perhaps by commenting out "local_addresses" or running the appropriate
dpkg-reconfigure incantation for your installation (you did say it was
Ubuntu).

You may also need to poke a hole in your iptables ruleset.

Graeme

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

bbowler at bigelow

Jun 27, 2012, 9:55 AM

Post #5 of 5 (858 views)
Permalink

Re: Connection refused. [In reply to]

On Wed, 27 Jun 2012 16:54:19 +0100
Graeme Fowler <graeme [at] graemef> put fingers to keyboard and said:

>running the appropriate
>dpkg-reconfigure incantation for your installation (you did say it was
>Ubuntu).

d'oh!

--
+-------------------+---------------------------------------------------+
Bruce Bowler | I'm so mean, I make medicine sick.
1.202.747.3255 x503 |
bbowler [at] bigelow | - Mohammed Ali
+-------------------+---------------------------------------------------+

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads