No email access from internal network

stevieb413 · April 18, 2023, 7:54pm

**NethServer Version:7.9
**Module:Email

I updated from the server-manager yesterday now I have no access to email server from local email client however I do have access to the email server outside of the local network. Could this be a firewall issue?

mrmarkuz · April 19, 2023, 10:47am

Please check /var/log/firewall.log for errors/blocks.

You may disable the firewall to check if it’s the cause:

Do you use IPS or Threat Shield? A wrong rule or list could be the issue…

stevieb413 · April 19, 2023, 12:47pm

I disabled shorewall in services still doing the same thing funny thing is I have a subdomain setup and the mail server works fine on the internal network.

22:59 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=19593 DF PROTO=TCP SPT=636 DPT=33838 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 14:34:37 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=41638 DF PROTO=TCP SPT=636 DPT=34276 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 14:41:04 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=43732 DF PROTO=TCP SPT=636 DPT=34708 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 14:51:20 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=58064 DF PROTO=TCP SPT=636 DPT=35246 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 15:03:46 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=162.243.145.8 DST=192.168.0.33 LEN=53 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=UDP SPT=37949 DPT=143 LEN=33 
Apr 18 15:14:27 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=16151 DF PROTO=TCP SPT=636 DPT=36730 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 15:17:52 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=194.187.179.194 DST=192.168.0.33 LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=40687 DF PROTO=TCP SPT=34674 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 
Apr 18 15:28:23 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=193.142.146.135 DST=192.168.0.33 LEN=28 TOS=0x00 PREC=0x20 TTL=236 ID=4498 PROTO=UDP SPT=61000 DPT=21 LEN=8 
Apr 18 15:35:40 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=45.134.212.89 DST=192.168.0.33 LEN=28 TOS=0x00 PREC=0x20 TTL=234 ID=57516 PROTO=UDP SPT=61000 DPT=21 LEN=8 
Apr 18 15:42:46 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=192.241.227.30 DST=192.168.0.33 LEN=53 TOS=0x00 PREC=0x20 TTL=229 ID=54321 PROTO=UDP SPT=33072 DPT=465 LEN=33 
Apr 18 16:08:03 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=45.79.144.216 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=235 ID=16907 PROTO=TCP SPT=60000 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 18 16:12:24 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=60208 DF PROTO=TCP SPT=445 DPT=39750 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:12:24 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=60244 DF PROTO=TCP SPT=445 DPT=39742 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:12:37 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=6553 DF PROTO=TCP SPT=445 DPT=39750 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:12:37 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=6633 DF PROTO=TCP SPT=445 DPT=39742 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:13:03 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=28125 DF PROTO=TCP SPT=445 DPT=39750 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:13:03 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=28249 DF PROTO=TCP SPT=445 DPT=39742 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:13:55 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=269 DF PROTO=TCP SPT=445 DPT=39750 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:13:55 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=446 DF PROTO=TCP SPT=445 DPT=39742 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:21:24 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=32787 DF PROTO=TCP SPT=636 DPT=39988 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:23:01 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=10760 DF PROTO=TCP SPT=636 DPT=40088 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:23:01 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=10779 DF PROTO=TCP SPT=636 DPT=40090 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:23:25 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=19182 DF PROTO=TCP SPT=636 DPT=40138 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:25:26 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=23246 DF PROTO=TCP SPT=636 DPT=40272 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:25:26 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=23264 DF PROTO=TCP SPT=636 DPT=40274 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:25:26 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=23490 DF PROTO=TCP SPT=636 DPT=40286 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:33:50 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=180.178.130.107 DST=192.168.0.33 LEN=76 TOS=0x00 PREC=0x20 TTL=30 ID=24858 DF PROTO=UDP SPT=56416 DPT=8082 LEN=56 
Apr 18 16:35:18 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=31455 DF PROTO=TCP SPT=636 DPT=41088 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 16:46:25 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:74:04:f1:80:7d:75:08:00 SRC=192.168.0.87 DST=192.168.0.33 LEN=1248 TOS=0x00 PREC=0x00 TTL=128 ID=39988 DF PROTO=UDP SPT=57763 DPT=443 LEN=1228 
Apr 18 16:46:26 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:74:04:f1:80:7d:75:08:00 SRC=192.168.0.87 DST=192.168.0.33 LEN=1248 TOS=0x00 PREC=0x00 TTL=128 ID=39993 DF PROTO=UDP SPT=57763 DPT=443 LEN=1228 
Apr 18 16:46:29 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:74:04:f1:80:7d:75:08:00 SRC=192.168.0.87 DST=192.168.0.33 LEN=1248 TOS=0x00 PREC=0x00 TTL=128 ID=39996 DF PROTO=UDP SPT=57763 DPT=443 LEN=1228 
Apr 18 16:46:32 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:74:04:f1:80:7d:75:08:00 SRC=192.168.0.87 DST=192.168.0.33 LEN=1248 TOS=0x00 PREC=0x00 TTL=128 ID=40004 DF PROTO=UDP SPT=57763 DPT=443 LEN=1228 
Apr 18 16:52:48 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=49712 DF PROTO=TCP SPT=636 DPT=41784 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 17:05:04 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=40563 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 18 17:05:14 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=40564 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 18 17:05:24 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=40566 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 18 17:05:36 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=40567 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 18 17:05:47 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=40568 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 18 17:05:58 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=40570 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 18 17:55:11 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=8585 DF PROTO=TCP SPT=636 DPT=37232 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 17:55:13 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=10111 DF PROTO=TCP SPT=636 DPT=37260 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 17:55:14 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=11165 DF PROTO=TCP SPT=636 DPT=37280 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:14:08 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=14156 DF PROTO=TCP SPT=636 DPT=37870 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:14:10 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=14702 DF PROTO=TCP SPT=636 DPT=37902 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:14:11 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=15105 DF PROTO=TCP SPT=636 DPT=37932 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:14:20 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=17936 DF PROTO=TCP SPT=636 DPT=38062 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:14:58 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=35272 DF PROTO=TCP SPT=636 DPT=38136 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:15:03 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=39759 DF PROTO=TCP SPT=636 DPT=38214 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:15:08 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=42282 DF PROTO=TCP SPT=636 DPT=38230 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:29:25 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=54884 DF PROTO=TCP SPT=636 DPT=38978 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:42:07 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=161.97.145.237 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=239 ID=32126 PROTO=TCP SPT=61000 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 18 18:45:52 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=64334 DF PROTO=TCP SPT=636 DPT=39808 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 18:57:14 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=185.243.181.41 DST=192.168.0.33 LEN=112 TOS=0x00 PREC=0x20 TTL=38 ID=39467 DF PROTO=UDP SPT=18700 DPT=8082 LEN=92 
Apr 18 19:49:48 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=17602 DF PROTO=TCP SPT=636 DPT=45662 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 20:48:20 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=193.142.146.135 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=236 ID=42028 PROTO=TCP SPT=61000 DPT=21 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 18 21:14:30 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=192.241.203.215 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=TCP SPT=47921 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 18 21:45:23 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=192.241.198.31 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=TCP SPT=51539 DPT=5006 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 18 21:54:53 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=185.233.19.94 DST=192.168.0.33 LEN=44 TOS=0x00 PREC=0x20 TTL=231 ID=22189 PROTO=TCP SPT=58914 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 18 22:05:02 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=57457 DF PROTO=TCP SPT=636 DPT=55884 WINDOW=0 RES=0x00 RST URGP=0 
Apr 18 22:32:11 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=46.161.54.57 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=231 ID=54321 PROTO=TCP SPT=43850 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 18 23:05:29 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=41986 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 18 23:05:40 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=41987 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 18 23:05:52 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=41988 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 18 23:06:03 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=41990 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 18 23:06:14 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=41991 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 18 23:06:25 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=41993 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 19 00:07:05 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=185.217.137.118 DST=192.168.0.33 LEN=76 TOS=0x00 PREC=0x20 TTL=45 ID=44089 DF PROTO=UDP SPT=2751 DPT=8082 LEN=56 
Apr 19 00:22:58 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=193.142.146.135 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=236 ID=60365 PROTO=TCP SPT=61000 DPT=21 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 00:28:22 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=193.142.146.135 DST=192.168.0.33 LEN=28 TOS=0x00 PREC=0x20 TTL=236 ID=46640 PROTO=UDP SPT=61000 DPT=21 LEN=8 
Apr 19 00:30:06 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=134.65.232.176 DST=192.168.0.33 LEN=112 TOS=0x00 PREC=0x00 TTL=53 ID=9910 DF PROTO=UDP SPT=50050 DPT=8082 LEN=92 
Apr 19 00:33:21 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=192.241.221.11 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=TCP SPT=45784 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 00:33:28 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=193.142.146.135 DST=192.168.0.33 LEN=28 TOS=0x00 PREC=0x20 TTL=236 ID=25426 PROTO=UDP SPT=61000 DPT=21 LEN=8 
Apr 19 00:43:17 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=45.170.254.121 DST=192.168.0.33 LEN=118 TOS=0x00 PREC=0x00 TTL=53 ID=24619 DF PROTO=UDP SPT=5060 DPT=8082 LEN=98 
Apr 19 00:53:56 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=167.94.138.99 DST=192.168.0.33 LEN=44 TOS=0x00 PREC=0x20 TTL=33 ID=27683 PROTO=TCP SPT=20428 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 00:58:08 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=103.77.172.56 DST=192.168.0.33 LEN=67 TOS=0x00 PREC=0x20 TTL=33 ID=65498 DF PROTO=UDP SPT=60399 DPT=8082 LEN=47 
Apr 19 01:47:00 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=192.241.192.9 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=TCP SPT=49845 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 02:01:39 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=94.102.61.26 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=230 ID=54321 PROTO=TCP SPT=56217 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 02:22:06 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=45.148.10.81 DST=192.168.0.33 LEN=60 TOS=0x00 PREC=0x20 TTL=234 ID=60382 DF PROTO=TCP SPT=30684 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 02:49:30 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:be:65:89:d6:3b:a0:08:00 SRC=192.168.0.5 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=30110 DF PROTO=TCP SPT=636 DPT=47560 WINDOW=0 RES=0x00 RST URGP=0 
Apr 19 02:52:16 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=167.71.168.200 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=233 ID=26437 PROTO=TCP SPT=80 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 03:46:47 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=35.229.89.164 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=243 ID=31874 PROTO=TCP SPT=53829 DPT=21 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 04:04:27 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=162.243.134.4 DST=192.168.0.33 LEN=52 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=UDP SPT=57371 DPT=80 LEN=32 
Apr 19 04:12:47 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=35.216.240.53 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=239 ID=54321 PROTO=TCP SPT=43482 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 04:15:07 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=107.170.237.8 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=TCP SPT=34536 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 04:36:21 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=205.210.31.176 DST=192.168.0.33 LEN=44 TOS=0x00 PREC=0x20 TTL=240 ID=2907 PROTO=TCP SPT=55415 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 04:36:31 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=167.94.145.88 DST=192.168.0.33 LEN=44 TOS=0x00 PREC=0x20 TTL=36 ID=44264 PROTO=TCP SPT=37300 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 04:51:34 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=185.200.118.46 DST=192.168.0.33 LEN=1378 TOS=0x00 PREC=0x20 TTL=237 ID=54321 PROTO=UDP SPT=47602 DPT=443 LEN=1358 
Apr 19 05:05:51 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=43240 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 19 05:06:02 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=43241 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 19 05:06:13 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=43242 PROTO=UDP SPT=51497 DPT=161 LEN=51 
Apr 19 05:06:25 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=43244 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 19 05:06:36 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=43245 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 19 05:06:47 mail kernel: Shorewall:loc2fw:REJECT:IN=br0 OUT= MAC=d0:50:99:07:6a:78:94:c6:91:56:3f:7b:08:00 SRC=192.168.0.102 DST=192.168.0.33 LEN=65 TOS=0x00 PREC=0x00 TTL=128 ID=43247 PROTO=UDP SPT=51497 DPT=161 LEN=45 
Apr 19 05:16:24 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=106.75.5.32 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=224 ID=23577 PROTO=TCP SPT=58914 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 05:25:18 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=184.105.247.214 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=230 ID=54321 PROTO=TCP SPT=33798 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 05:42:39 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=192.241.239.23 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=54321 PROTO=TCP SPT=43217 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 
Apr 19 05:44:11 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=34.142.213.194 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=43 ID=29419 PROTO=TCP SPT=47821 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 06:26:49 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=194.26.29.169 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=233 ID=16811 PROTO=TCP SPT=55901 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 06:49:59 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=89.248.163.200 DST=192.168.0.33 LEN=40 TOS=0x00 PREC=0x20 TTL=230 ID=258 PROTO=TCP SPT=40292 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 
Apr 19 07:11:26 mail kernel: Shorewall:net2fw:DROP:IN=br0 OUT= MAC=d0:50:99:07:6a:78:b4:75:0e:57:c0:3d:08:00 SRC=167.94.146.72 DST=192.168.0.33 LEN=44 TOS=0x00 PREC=0x20 TTL=33 ID=15784 PROTO=TCP SPT=57771 DPT=21 WINDOW=1024 RES=0x00 SYN URGP=0

stevieb413 · April 19, 2023, 1:32pm

I don’t run IPS or Threat Shield? however I did notice in services that C-ICAP Server and ipsec (custom) was running would that be it.

stevieb413 · April 19, 2023, 2:01pm

When I ping the main domain mail.jamesahbell.com from any of the local desktops I get what looks like a mac address however when I ping the subdomain mail.bellcriminallaw.com i get the actual external static ip. if i ping the mail.jamesahbell.com from outside the local network I get the external static ip.


PS C:\WINDOWS\system32> ping mail.jamesahbell.com

Pinging mail.jamesahbell.com [1111:xc50:3000:2::1b] with 32 bytes of data:
Reply from 1111:xc50:3000:2::1b: time=41ms
Reply from 1111:xc50:3000:2::1b: time=42ms
Reply from 1111:fx50:3000:2::1b: time=40ms
Reply from 1111:xc50:3000:2::1b: time=37ms

Ping statistics for 1111:xc50:3000:2::1b:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 37ms, Maximum = 42ms, Average = 40ms
PS C:\WINDOWS\system32> ping mail.bellcriminallaw.com

Pinging mail.bellcriminallaw.com [173.164.10.173] with 32 bytes of data:
Reply from 173.164.10.173: bytes=32 time<1ms TTL=64
Reply from 173.164.10.173: bytes=32 time<1ms TTL=64
Reply from 173.164.10.173: bytes=32 time<1ms TTL=64
Reply from 173.164.10.173: bytes=32 time<1ms TTL=64

Ping statistics for 173.164.10.173:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
PS C:\WINDOWS\system32>

mrmarkuz · April 19, 2023, 2:34pm

Sorry, I don’t understand, is it now working from internal or not?

When you disable the firewall in services it blocks everything.

Please try

shorewall clear

so the firewall won’t block anything anymore. Don’t forget to enable the firewall again after testing by executing

signal-event firewall-adjust

It’s an IPv6 address.
Do your clients use NethServer as DNS server?

EDIT:

When I nslookup your domain using my Neth as DNS and using Google DNS, I get following same results:

MRMARKUZ\markus@leap:~> nslookup mail.jamesahbell.com
Server:		192.168.3.21
Address:	192.168.3.21#53

Non-authoritative answer:
Name:	mail.jamesahbell.com
Address: 173.164.10.173

MRMARKUZ\markus@leap:~> nslookup mail.jamesahbell.com 8.8.8.8
Server:		8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	mail.jamesahbell.com
Address: 173.164.10.173

stevieb413 · April 19, 2023, 4:15pm

I have the clients dns set to 8.8.8.8 and 1.1.1.1

[root@mail ~]# shorewall clear
Clearing Shorewall....
Processing /etc/shorewall/stop ...
Processing /etc/shorewall/tcclear ...
Preparing iptables-restore input...
Running /sbin/iptables-restore --wait 60...
IPv4 Forwarding Enabled
Processing /etc/shorewall/stopped ...
Processing /etc/shorewall/clear ...
done.
[root@mail ~]# signal-event firewall-adjust
[root@mail ~]# systemctl status shorewall
● shorewall.service - Shorewall IPv4 firewall
   Loaded: loaded (/usr/lib/systemd/system/shorewall.service; enabled; vendor preset: disabled)
  Drop-In: /usr/lib/systemd/system/shorewall.service.d
           └─nethserver-firewall-base.conf
   Active: active (exited) since Wed 2023-04-19 11:04:26 EDT; 9min ago
 Main PID: 26432 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/shorewall.service

Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: 0 TC commands executed
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: All Done! Enjoy...
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: bye...
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: Preparing iptables-restore input...
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: Running /sbin/iptables-restore --wait 60...
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: IPv4 Forwarding Enabled
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: Processing /etc/shorewall/start ...
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: Processing /etc/shorewall/started ...
Apr 19 11:04:26 mail.jamesahbell.com shorewall[26432]: done.
Apr 19 11:04:26 mail.jamesahbell.com systemd[1]: Started Shorewall IPv4 firewall.
[root@mail ~]#

I set the windows client up to use Nethserver for DNS this what I get from the local network


PS C:\WINDOWS\system32> nslookup mail.jamesahbell.com
Server:  UnKnown
Address:  2603:3011:186d:2080:b675:eff:fe57:c03d

Non-authoritative answer:
Name:    mail.jamesahbell.com.mail.jamesahbell.com
Addresses:  2607:fc50:3000:2::1b
          2607:fc50:3000:2::55
          104.225.8.29
          104.225.8.28

PS C:\WINDOWS\system32>

Nethserver terminal

[root@mail ~]# nslookup mail.jamesahbell.com
Server:		127.0.0.1
Address:	127.0.0.1#53

Name:	mail.jamesahbell.com
Address: 192.168.0.33
Name:	mail.jamesahbell.com
Address: 2607:fc50:3000:2::1b
Name:	mail.jamesahbell.com
Address: 2607:fc50:3000:2::55

From outside of local network

Last login: Wed Apr 19 11:31:13 on ttys000
ipconfigMac-Pro ~ % nslookup mail.jamesahbell.com         
Server:		192.168.0.2
Address:	192.168.0.2#53

Non-authoritative answer:
Name:	mail.jamesahbell.com
Address: 173.164.10.173

Mac-Pro ~ %

Andy_Wismer · April 19, 2023, 4:23pm

Hi @stevieb413

Just for your info:

To do a correct nslookup on a domain or FQDN, always put a dot at the end…

Wrong way:

nslookup mail.jamesahbell.com

Right way:

nslookup mail.jamesahbell.com.

The “wrong way” gives you results like:

It has to do with the domain the querying host sees as it’s own, same goes also for the queried dns server.

The dot at the end tells the dns NOT to add the local domain (again) at the end!

My 2 cents
Andy

PS:
As FQDNs are “read” back to forth, the dot at the end represents the “world”.

mrmarkuz · April 19, 2023, 5:45pm

Do you use NethServer as DHCP server? I think there’s a router providing IPv6 addresses in your local network. You may try to disable IPv6 on the router.

stevieb413 · April 20, 2023, 8:56pm

I have looked at my router config and the IPV6 option is disabled if i ping my domain from one of the local Windows machines on the network ping mail.jamesahbell.com i get a reply from 104.255.8.28 which is not my static ip nor my dns host which is freedns.afraid.org the 104.255.8.28 ip is Astute Hosting astutehosting.com dns server ns1.astutehosting.net could this be some kind of windows virus causing this? outside the local network everything works fine.

PS C:\Windows\system32> ping mail.jamesahbell.com

Pinging mail.jamesahbell.com [104.225.8.28] with 32 bytes of data:
Reply from 104.225.8.28: bytes=32 time=43ms TTL=48
Reply from 104.225.8.28: bytes=32 time=40ms TTL=48
Reply from 104.225.8.28: bytes=32 time=43ms TTL=48
Reply from 104.225.8.28: bytes=32 time=46ms TTL=48

Ping statistics for 104.225.8.28:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 40ms, Maximum = 46ms, Average = 43ms

    Minimum = 40ms, Maximum = 46ms, Average = 43ms
PS C:\Windows\system32> nslookup 104.255.8.28
Server:  dns.google
Address:  8.8.8.8

28.8.255.104.in-addr.arpa
        primary name server = ns1.astutehosting.net
        responsible mail addr = root.astutehosting.net
        serial  = 2023042013
        refresh = 10800 (3 hours)

        retry   = 300 (5 mins)
        expire  = 3600000 (41 days 16 hours)
        default TTL = 300 (5 mins)
nslookup*** No internal type for both IPv4 and IPv6 Addresses (A+AAAA) records available for 104.255.8.28
Server:  dns.googlem32> nslookup mail.jamesahbell.com 8.8.8.8
Address:  8.8.8.8

Non-authoritative answer:
Name:    mail.jamesahbell.com.mail.jamesahbell.com
Addresses:  2607:fc50:3000:2::55
          2607:fc50:3000:2::1b
          104.225.8.29
          104.225.8.28

PS C:\Windows\system32>


PS C:\Windows\system32> nslookup mail.jamesahbell.com 8.8.8.8
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    mail.jamesahbell.com.mail.jamesahbell.com
Addresses:  2607:fc50:3000:2::55
          2607:fc50:3000:2::1b
          104.225.8.29
          104.225.8.28

PS C:\Windows\system32>

stevieb413 · April 20, 2023, 9:47pm

Also when I do nslookup mail.jamesahbell.com 192.168.0.33 which is the Nethserver IP shows the following.


PS C:\Windows\system32> nslookup mail.jamesahbell.com 192.168.0.33
Server:  mail.jamesahbell.com
Address:  192.168.0.33

Non-authoritative answer:
Name:    mail.jamesahbell.com.mail.jamesahbell.com
Addresses:  2607:fc50:3000:2::55
          2607:fc50:3000:2::1b
          104.225.8.28
          104.225.8.29

stevieb413 · April 21, 2023, 10:38am

I ended up just adding the Nethserver domain and ip to the Windows hosts file to fix this issue.