这样配置iptables为什么不能发送邮件？

fisherjams

我新装了一台linux,(redhat 9)，向局域网内的邮件服务器(exchange)送邮件，在没有启用iptables的时候是可以送出去的，但是一启用了就无法发送邮件。iptables内容如下，请各位帮我看看究竟是怎么回事。

#cat iptables

# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
*filter
:INPUT ACCEPT [0]
:FORWARD ACCEPT [0]
:OUTPUT ACCEPT [0]
:RH-Lokkit-0-50-INPUT - [0]
:RH-Lokkit-0-50-OUTPUT - [0]
-A INPUT -j RH-Lokkit-0-50-INPUT
-A FORWARD -j RH-Lokkit-0-50-INPUT
-A OUTPUT -j RH-Lokkit-0-50-OUTPUT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 443 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 22 --syn -j ACCEPT
-A RH-Lokkit-0-50-OUTPUT -p tcp -m tcp --dport 25 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT
-A RH-Lokkit-0-50-OUTPUT -i lo -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -j REJECT
-A RH-Lokkit-0-50-OUTPUT -p tcp -m tcp --syn -j REJECT
-A RH-Lokkit-0-50-OUTPUT -p udp -m udp -j REJECT
COMMIT



附：mail 出错报告
Jan 25 18:03:40 cmsvr sendmail[13641]: j0PA3e4Y013641: from=root, size=68, class=0, nrcpts=1, msgid=<200501251003.j0PA3e4Y013641@cmsvr>;, relay=root@localhost
Jan 25 18:03:40 cmsvr sendmail[13641]: j0PA3e4Y013641: to=afjg@somecompany.com, delay=00:00:00, mailer=esmtp, pri=30063, dsn=4.4.3, stat=queued
Jan 25 18:05:40 cmsvr sendmail[13650]: j0PA5ejm013650: from=root, size=54, class=0, nrcpts=1, msgid=<200501251005.j0PA5ejm013650@cmsvr>;, relay=root@localhost
Jan 25 18:05:40 cmsvr sendmail[13650]: j0PA5ejm013650: to=afjg@somecompany.com, delay=00:00:00, mailer=esmtp, pri=30050, dsn=4.4.3, stat=queued
Jan 25 18:35:55 cmsvr sendmail[13733]: j0PAZt7T013733: from=root, size=59, class=0, nrcpts=1, msgid=<200501251035.j0PAZt7T013733@cmsvr>;, relay=root@localhost
Jan 25 18:35:55 cmsvr sendmail[13733]: j0PAZt7T013733: to=afjg@somecompany.com, delay=00:00:00, mailer=esmtp, pri=30054, dsn=4.4.3, stat=queued

beike228

老兄，请教了,你的这个问题解决了吗？

platinum

# chkconfig iptables off;reboot
或者
# service iptables stop
或者
# iptables -P INPUT ACCEPT;iptables -P FORWARD ACCEPT;iptables -F

帝王在线

你那dns查询允许了试一试