CentOS - May 2015 - I Have Multiple Ips But Can Only Telnet to One Interface. Not the subinterface. How to Fix?

Hi guys,

I have multiple IPs bound to my Centos 6.6 box but I can only telnet to one
IP. Any ideas on what to do? I've searched the internet so far with every
keyword I can think of to no avail. I can see that postfix is only
listening on the first IP and to localhost. The IP I cannot smtp to is on
ETH0:1. I can access it via port 80 (web traffic) but the connection is
refused if i try to telnet. [image: :shock:]

The domain I can telenet to is mymodeltalk.com
The domain I cannot telenet to is inform.mymodeltalk.com

I have posted my current IP Tables rules, netstat, ifconfig -a, and route
-n. I have SElinux set to permissive.
[root at mail1 log]# netstat -plnt |grep :25
tcp 0 0 172.30.1.113:25 0.0.0.0:* LISTEN 18800/master
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 18800/master

[root at mail1 log]# iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 993 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 995 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 9292 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT

[root at mail1 log]# ifconfig -a
eth0 Link encap:Ethernet HWaddr 0A:28:21:76:97:85
inet addr:172.30.1.113 Bcast:172.30.1.255 Mask:255.255.255.0
inet6 addr: fe80::828:21ff:fe76:9785/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:9001 Metric:1
RX packets:793739006 errors:0 dropped:0 overruns:0 frame:0
TX packets:480841833 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:937438761212 (873.0 GiB) TX bytes:136066252190 (126.7 GiB)
Interrupt:18

eth0:1 Link encap:Ethernet HWaddr 0A:28:21:76:97:85
inet addr:172.30.1.65 Bcast:172.30.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:9001 Metric:1
Interrupt:18

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:369804 errors:0 dropped:0 overruns:0 frame:0
TX packets:369804 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:207298477 (197.6 MiB) TX bytes:207298477 (197.6 MiB)

[root at mail1 log]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.30.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0
0.0.0.0 172.30.1.1 0.0.0.0 UG 0 0 0 eth0
--
Mike McKoy
*404.590.7176*
http://MyForeverHair.com
http://www.MyModelTalk.com
http://InCrowdUSA.net
http://www.google.com/profiles/mikemckoy

________________________________________
From: centos-bounces at centos.org <centos-bounces at centos.org> on
behalf of Mike McKoy <mikemckoy at gmail.com>
Sent: 20 May 2015 11:41
To: centos at centos.org
Subject: [CentOS] I Have Multiple Ips But Can Only Telnet to One Interface. Not
the subinterface. How to Fix?

Hi guys,

I have multiple IPs bound to my Centos 6.6 box but I can only telnet to one
IP. Any ideas on what to do? I've searched the internet so far with every
keyword I can think of to no avail. I can see that postfix is only
listening on the first IP and to localhost. The IP I cannot smtp to is on
ETH0:1. I can access it via port 80 (web traffic) but the connection is
refused if i try to telnet. [image: :shock:]

The domain I can telenet to is mymodeltalk.com
The domain I cannot telenet to is inform.mymodeltalk.com
<snip>
-----------------------

Hi,

At a rough guess it's because those domains are pointing to different IPs:

inform.mymodeltalk.com.	3600	IN	A	52.0.33.25
mymodeltalk.com.	600	IN	A	52.0.148.79

Also you probably should use SSH to connect to the server and not telnet, unless
there's a *really* good reason to use telnet.  Fix the DNS so they're
both pointing to the same server and I reckon you'll be good.

Cheers,

Matthew Moore

________________________________________
From: centos-bounces at centos.org <centos-bounces at centos.org> on
behalf of Mike McKoy <mikemckoy at gmail.com>
Sent: 20 May 2015 11:41
To: centos at centos.org
Subject: [CentOS] I Have Multiple Ips But Can Only Telnet to One Interface. Not
the subinterface. How to Fix?

Hi guys,

I have multiple IPs bound to my Centos 6.6 box but I can only telnet to one
IP. 

<snip>
------------------

Mike,

Sorry, should have read that first line more closely before replying.

Cheers,

Matt

Hi there matt,

they are supposed to be different IPs. One is a newsletter ip and the other
a forum. I need to keep the mail traffic Separate so that member messages
don't go to spam. I've searched all over and can't find anything in
the
CENTOS forums or on the net which corresponds to this. i just need to get
inform.mymodeltalk.com to respond to port 25. lol, that's all I want so I
can get my secondary instance of postfix to send mail

--
Mike McKoy
*404.590.7176*
http://MyForeverHair.com
http://www.MyModelTalk.com
http://InCrowdUSA.net
http://www.google.com/profiles/mikemckoy

On Wed, May 20, 2015 at 6:47 AM, Matthew Moore <MooreM10 at cardiff.ac.uk>
wrote:
>
>
>
>
>
> ________________________________________
> From: centos-bounces at centos.org <centos-bounces at centos.org> on
behalf of
> Mike McKoy <mikemckoy at gmail.com>
> Sent: 20 May 2015 11:41
> To: centos at centos.org
> Subject: [CentOS] I Have Multiple Ips But Can Only Telnet to One
> Interface. Not the subinterface. How to Fix?
>
> Hi guys,
>
> I have multiple IPs bound to my Centos 6.6 box but I can only telnet to one
> IP. Any ideas on what to do? I've searched the internet so far with
every
> keyword I can think of to no avail. I can see that postfix is only
> listening on the first IP and to localhost. The IP I cannot smtp to is on
> ETH0:1. I can access it via port 80 (web traffic) but the connection is
> refused if i try to telnet. [image: :shock:]
>
> The domain I can telenet to is mymodeltalk.com
> The domain I cannot telenet to is inform.mymodeltalk.com
> <snip>
> -----------------------
>
> Hi,
>
> At a rough guess it's because those domains are pointing to different
IPs:
>
> inform.mymodeltalk.com. 3600    IN      A       52.0.33.25
> mymodeltalk.com.        600     IN      A       52.0.148.79
>
> Also you probably should use SSH to connect to the server and not telnet,
> unless there's a *really* good reason to use telnet.  Fix the DNS so
> they're both pointing to the same server and I reckon you'll be
good.
>
> Cheers,
>
> Matthew Moore
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

That's OK... any suggestions? I thought this was a firewall issue but I
have no idea how to isolate & open ports on a subinterface. I bet the
solution is simpler than remembering my own name... smh

--
Mike McKoy
*404.590.7176*
http://MyForeverHair.com
http://www.MyModelTalk.com
http://InCrowdUSA.net
http://www.google.com/profiles/mikemckoy

On Wed, May 20, 2015 at 6:52 AM, Matthew Moore <MooreM10 at cardiff.ac.uk>
wrote:
>
>
>
> ________________________________________
> From: centos-bounces at centos.org <centos-bounces at centos.org> on
behalf of
> Mike McKoy <mikemckoy at gmail.com>
> Sent: 20 May 2015 11:41
> To: centos at centos.org
> Subject: [CentOS] I Have Multiple Ips But Can Only Telnet to One
> Interface. Not the subinterface. How to Fix?
>
> Hi guys,
>
> I have multiple IPs bound to my Centos 6.6 box but I can only telnet to one
> IP.
>
> <snip>
> ------------------
>
> Mike,
>
> Sorry, should have read that first line more closely before replying.
>
> Cheers,
>
> Matt
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

On 20/05/2015 11:41, Mike McKoy wrote:
> [root at mail1 log]# netstat -plnt |grep :25
> tcp 0 0 172.30.1.113:25 0.0.0.0:* LISTEN 18800/master
> tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 18800/master
You are not listening on 172.30.1.65 you need to edit the postfix config 
to listen on either 0.0.0.0 or both IP's

Tris


*************************************************************
This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity 
to whom they are addressed. If you have received this email 
in error please notify postmaster at bgfl.org

The views expressed within this email are those of the 
individual, and not necessarily those of the organisation
*************************************************************

Hi trish, i have postfix configured to listen on that ip... it's still not
listening.

see below:

# Note: you need to stop/start Postfix when this parameter changes.
#
#inet_interfaces = all
#inet_interfaces = $myhostname
#inet_interfaces = $myhostname, localhost
inet_interfaces = 172.30.1.65

# Enable IPv4, and IPv6 if supported
inet_protocols = all


--
Mike McKoy
*404.590.7176*
http://MyForeverHair.com
http://www.MyModelTalk.com
http://InCrowdUSA.net
http://www.google.com/profiles/mikemckoy

On Wed, May 20, 2015 at 7:59 AM, Tris Hoar <trishoar at bgfl.org> wrote:
> On 20/05/2015 11:41, Mike McKoy wrote:
>
>> [root at mail1 log]# netstat -plnt |grep :25
>> tcp 0 0 172.30.1.113:25 0.0.0.0:* LISTEN 18800/master
>> tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 18800/master
>>
>
> You are not listening on 172.30.1.65 you need to edit the postfix config
> to listen on either 0.0.0.0 or both IP's
>
> Tris
>
>
> *************************************************************
> This email and any files transmitted with it are confidential
> and intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> postmaster at bgfl.org
>
> The views expressed within this email are those of the individual, and not
> necessarily those of the organisation
> *************************************************************
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>