Skip to main content
hklb
Visitor III
April 12, 2017
Question

IPV6 - unable to connect to fortimail on SMTP port

  • April 12, 2017
  • 1 reply
  • 10780 views

Hello,

 

I try to configure my fortimail in full IPv6 settings. I'm able to manage the Fortimail on https port, I configured the basic settings :

- mail settings : settings, domain

- policy, access control : sender(external), recipient(internal), senderIP(::/0), action(relay)

- policy, policies : source/destination (::/0), session (inbound_session)

 

I did the same on an another Fortimail in IPv4 settings, and all connections are OK..

 

Is there any settings to enable to support IPv6 ?

 

I did a packet capture on FML and here is the result :

fortimail # diagnose sniffer packet any "port 25" 4 0
System Time: 2017-04-12 23:17:53 CEST (Uptime: 0d 2h 10m)
interfaces=[any]
filters=[port 25]
3.850562 port1 in 2001:xxxx:xxx:1:dd5d:40f1:f175:ce9b.4041 -> 2001:xxxx:xxx:db0::30.25: syn 1131742929 
3.850615 port1 out 2001:xxxx:xxx:db0::30.25 -> 2001:xxxx:xxx:1:dd5d:40f1:f175:ce9b.4041: rst 0 ack 1131742930 
4.356056 port1 in 2001:xxxx:xxx:1:dd5d:40f1:f175:ce9b.4041 -> 2001:xxxx:xxx:db0::30.25: syn 1131742929 
4.356083 port1 out 2001:xxxx:xxx:db0::30.25 -> 2001:xxxx:xxx:1:dd5d:40f1:f175:ce9b.4041: rst 0 ack 1131742930 
4.861313 port1 in 2001:xxxx:xxx:1:dd5d:40f1:f175:ce9b.4041 -> 2001:xxxx:xxx:db0::30.25: syn 1131742929 
4.861356 port1 out 2001:xxxx:xxx:db0::30.25 -> 2001:xxxx:xxx:1:dd5d:40f1:f175:ce9b.4041: rst 0 ack 1131742930

 

Thanks in advance

 

Lucass

    1 reply

    emnoc
    New Member
    April 12, 2017

    Will your in  the  right path, so you have no listener on  ipv6  for SMTP.

     

    Can you try from  the cli execute smtptest <your ipv6address> or  ::1

     

    Does any thing comes up? Do you see a banner ?

     

    if yes can you see anything in the logs

     

     

    e.g

     

    execute smtptest ::1

    HELO mydomain.com

    MAIL FROM:test1@socpuppets.com

    RCPT TO:someuser@yourdomain.com

     

     

    hklb
    hklbAuthor
    Visitor III
    April 12, 2017

    Hello emnoc,

     

    Thank for your reply.

     

    I tested right now and the connection fail :

    fortimail # execute smtptest ::1 Connection refused

    Connection status to ::1 port 25: Connecting to remote host failed.

    (same error with my global IP)

     

    I searched how to enable listener on my ipv6 address, but I didn't found it.. Could you please help me ?

     

    Thanks again

     

    Lucas

    emnoc
    New Member
    April 13, 2017

    What does the cli cmd show

     

    e.g

     

    show full  sys interface

     

    I would start at that point either you have  a valid ipv6 addressed interface or not.

     

    Ken