-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
What ports need to be allowed past the firewall? #1608
Comments
|
I think you're referring to the line in the docker-compose.yml? https://github.com/knadh/listmonk/blob/7c991677eb57df1ae3f081dad5eb378258cce2eb/docker-compose.yml#L20C1-L20C18 I'm referring to the lines in my firewall config https://petalhost.com/blog/how-to-allow-the-port-in-csf-firewall. I did more testingDoes not work:
Worked:
So simply opening one port -- either 100,000 OR 110,000 stops the Perhaps there's something unique about those big ports, but this https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers doesn't give me any clues. EDIT: Oh, yes there is:
I guess setting an invalid port is disabling the firewall or something. 70,000 is invalid but 60,000 is not, but using 60,000 doesn't fix the error. So
And even Per https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-dial-tcp-172-18-0-2-i-o-timeout/306411/3 I found the
So it's the listmonk_db IP that's having trouble connecting. I found I also see
I added all of these ports |
EDIT: I followed the directions in the link above and added additional lines for
But it didn't work. EDIT: It seems to be some unique problem with CSF Firewall & docker. I wasn't able to solve it but I bypassed it by not using docker to install & run listmonk. See https://community.centminmod.com/threads/installing-an-email-server-listmonk-postgresql-on-a-new-vhost-in-addition-to-a-forum-xenforo.24123/#post-97999 and the following comments. EDIT: this worked https://forum.configserver.com/viewtopic.php?p=28680#p28680 |
SMTP ports (usually 465 and/or 587 #1615) need to be allowed (TCP out & in?) at least. #1504 #952 #623 And some server hosts (Hetzner, etc.) block SMTP ports so you have to get permission to unblock them. https://docs.hetzner.com/cloud/servers/faq/#why-can-i-not-send-any-mails-from-my-server |
I have listmonk running on port 5870:
I was getting an "nginx 502 bad gateway" error before adding port 9000 to
TCP_OUT
of my firewall. Adding port 5870 did nothing.I was still getting a bunch of
error doing x: dial tcp 172.18.0.2:5432: connect: connection timed out
, so I added5432
toTCP_OUT
andTCP_IN
but it didn't work. Sincedocker ps
shows0.0.0.0:9432->5432/tcp
I also tried5432:9432
and5432,9432
, which didn't work, but9432:5432
toTCP_OUT
worked. I wonder then if I should be using5870:9000
instead of9000
?According to a search,
5870:9000
opens all ports between 5870 and 9000, so it would be better to only open 9000. Strange then that5432:9432
doesn't work but9432:5432
does. Do I really need to open all ports between 5432 and 9432? Is that what9432:5432
even does? (EDIT: someone said that IS what it does and I shouldn't do it since it opens too many ports)I have no idea what I'm doing. Is adding ports to TCP_IN the best way to do this? I saw in a guide for a similar email app that they used "custom TCP" (no idea if it was in/out) and only allowed their personal IP address, so that seems different.
The text was updated successfully, but these errors were encountered: