Question 47007 in Debian Question posted in
The oficial documentation can be found here.

iRedMail blocking custom ports after standard installation – Debian

I followed the standard installation of iRedMail (Version 1.4.2)
and updated the SSH certificates following this guide: https://www.linuxbabe.com/mail-server/debian-10-buster-iredmail-email-server

After a succefull installation some of my services (such as an Express REST API) couldn’t be reached anymore because the assigned Port was blocked.

I checked iptables and ufw setup and disabled ufw all together aswell but nothing changed.

I also looked at every log from each service that got installed with iRedMail and tried some configurations with nginx to proxy_serve that port.

Nothing seemed to be working and it wasn’t specifically bound to that port aswell (any port which wasn’t related to Http, Https, smpt and so on did not work).

Tags:

3

Answers


  1. Chosen as BEST ANSWER
    0

    I found in a forum about fail2ban that nft could be the problem. For some reason the nft firewall blocked every port.

    Executing sudo nft flush ruleset will remove every rule from nft and solved my problem.

    I searched hours to find this solution, so I figured I should share it here.


  2. 0

    I’m learning I’m not a expert, I solved it by editing

    1. sudo nano /etc/nftables.conf

    2. Just add a your new port for example

    # webmin
    tcp dport 10000 accept
    1. And then use sudo reboot.
    Login or Signup to reply.
  3. 0

    I searched a little more and found the blocking was done from /etc/firewalld/zones/iredmail.xml

    in my case I wanted ports 2095 and 2096 so I just added

    <port port="2095" protocol="tcp"/>
<port port="2096" protocol="tcp"/>

    to the xml

    rebooted the machine and viola.. ports are opened magically

    the previous method of deleting all rules works only temporarily, once you reboot you lose the setting. The above change is persistent

    just my 2¢

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search