2

I have a situation where only one PC on a network (network is behind a single public IP address) can connect to the mail server on port 25 (send out emails using Outlook, perform successful telnet test). Previously, all the systems could, all of a sudden, only one can. I suspect there is some limiting on the hosts side, but I have not been able to confirm.

I would like to know if this is possible - limiting emails this way. The network has one public IP from ISP coming into a consumer router, which shares private IPs by dhcp among the PCs in the office - over 10 PCs.

Thank you for your help.

8
  • so you have admin rights on the PCs, but not the e-mail server they are trying to send mail to/through? Is the mail server on a remote network or on your LAN?
    – August
    Commented May 28, 2013 at 13:39
  • totally possible. Most Hosted Mail servers, have limits on the number of connections from a single IP address. but that being said. It doesn't seem like a throttle since that would affect all hosts behind your NAT. How does the connection fail? IE doesn't connect to port 25 at all? Do you haven an inbound NAT/forward for 25 off the single IP. Does your mail server support submission (Port 587) or SSL (465) to try? Have you tried rebooting "consumer" router?
    – Doon
    Commented May 28, 2013 at 13:51
  • There is no description of the problem here. You tell us that one system can connect to the mail server and the others can't. But there's no description whatsoever of precisely how you're trying to connect and precisely what goes wrong when you try. Commented May 28, 2013 at 14:21
  • If you do not have access to the server, then this may be better over at superuser? Commented May 28, 2013 at 15:02
  • Thank you for all the comments. Thank you August, mail server is on a remote LAN. @Doon, yes, that is what I was thinking, that all hosts would be affected, but I'm having one PC alone working which means there is limiting to just one PC. This has happened twice. I got the ISP to change the public IP, and after the change everything got working, and then again, same thing - only one PC able to connect to the mail server on port 25. How the connection fails - yes, the computers do not connect to port 25 at all. I tried telnet on the various PCs to port 25 on the mail server. Commented May 28, 2013 at 17:07

1 Answer 1

1

There are many possible places where a limit like that could be placed, the router itself could put the limit, I've seen consumer grade routers that do per-ip and per-network connection limiting. It could also be further up the chain, anywhere between the router and the mail server. Does the ISP have limits on port 25 access, or do they make rules about the amount of users who can share a connection? Also, it could be the mailserver itself (unless it's yours) some mail servers can implement connection limiting, either on the firewall level, or even on the protocol level.

4
  • Thank you a lot @NickW. I eliminated the router and the ISP because I know the ISP allowed port 25 on the IP addresses, and there is no limit on amount of users on the IP. We tried another IP address from the ISP, and all the users were able to send out again using same consumer grade router. Thanks for confirming that some mail servers can implement connection limiting. This is most likely what is happening. Will check with the mail hosts. Commented May 28, 2013 at 16:58
  • I'd like to ask for your help. Do you know any specific mail server which can carry out connection limiting this way - limit to one private IP behind a NAT, can you point me to any documentation. I'd like to check it out, see the possibilities as we're trying to confirm what the issue might be, and the host isn't being very helpful. Thank you. Commented May 30, 2013 at 7:30
  • 1
    Yeah, with postfix you can install things like policyd.org which can stop multiple connections from a single IP (in the end, NAT looks like a single IP to the other side) and I can point to 100 firewalls which can do the same thing.. even iptables.
    – NickW
    Commented May 30, 2013 at 8:17
  • Thank you a lot for the informaiton. I am looking up policyd.org now. Commented May 30, 2013 at 9:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .