主页 / user-38665

Johan's questions

Martin Hope
Johan
Asked: 2018-01-05 05:43:45 +0800 CST
  • 0

已在 EC2 实例上配置后缀。可以在本地发送和接收电子邮件。还配置了具有经过验证的域的 SES。传出效果很好。但是，将邮件接收到 SES 会返回

<[email protected]>: host inbound-smtp.eu-west-1.amazonaws.com[176.32.109.132]
    said: 550 5.1.1 Requested action not taken: mailbox unavailable (in reply
    to RCPT TO command)

后缀日志中没有显示任何条目，所以我怀疑 SES 甚至没有尝试与我的 EC2 实例通信。

挖 MX mydomain.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> MX mydomain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1395
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;mydomain.com.                        IN      MX

;; ANSWER SECTION:
mydomain.com.         60      IN      MX      10 inbound-smtp.eu-west-1.amazonaws.com.

;; Query time: 77 msec
;; SERVER: 172.31.0.2#53(172.31.0.2)
;; WHEN: Thu Jan 04 13:32:12 UTC 2018
;; MSG SIZE  rcvd: 95

挖 mydomain.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> mydomain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51289
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;mydomain.com.                        IN      A 

;; ANSWER SECTION:
mydomain.com.         34      IN      A       52.50.184.26

;; Query time: 0 msec
;; SERVER: 172.31.0.2#53(172.31.0.2)
;; WHEN: Thu Jan 04 13:34:10 UTC 2018
;; MSG SIZE  rcvd: 59

我为入站流量打开了端口 25。我可以从家里远程登录到它。将 mydomain.com 替换为 kummelvagen.se，除非您是邪恶的机器人。

我错过了什么？

amazon-web-services
Martin Hope
Johan
Asked: 2015-04-05 01:20:07 +0800 CST
  • 0

我想将 ssh 流量从 A 端口 2222 转发到 B 端口 22。我在两个接口上都将 ipv4 转发设置为 1。尽管如此，这仍然行不通。怎么了？

机器A：eth0 192.168.0.150 eth1217.27.166.110

机器 B：eth0192.168.0.200

iptables -L：

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             192.168.0.200        tcp dpt:ssh state NEW,RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

iptables -L -t nat：

root@lbpub01:~# iptables -L -tnat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         
DNAT       tcp  --  anywhere             217.27.166.110       tcp dpt:2222 to:192.168.0.200:22

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  217.27.166.110       192.168.0.200        tcp dpt:ssh

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

更新

我从 irc@freenode 的好人那里得到了帮助，所以这是我的工作iptables-save文件：

*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -p tcp -m tcp -d 217.27.166.110 --dport 2222 -j DNAT --to-destination 192.168.0.200:22
-A POSTROUTING -o eth+ -j MASQUERADE
COMMIT
*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -p tcp --dport http -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -j DROP
COMMIT
iptables