Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

5.5.4 You are not allowed to connect - new install

Updated: 21 May 2010 | 3 comments
Lacko's picture
0 0 Votes
Login to vote

Hello,

I just have installed a new appliance (8.0.3-11) and set up basic settings.
I selected that the the appliance should filter both incoming and outgoing mails,  therefore
I had to choose two interfaces, one for incoming and the other - virtual - for outgoing mails.

I configured that incoming mails should be accested from any ip addresses and outgoing mails
only from a specific address.

It turns out, that when I try to telnet into the allpiance using the ip address of the
interface configured for incoming connections, I get the 5.5.4 you are not allowed to connect,
before I could enter any address information. So the appliance refuses smtp connection
to this interface.

If I try to connect to this address from the server - which ip address is set up on the appliance
to accept outgoing mail connections from - then the connection is succesful.

Eventually it seems that either me or the appliance do not understand what is incoming
mail connection or what is outgoing. Am I mistaken, if I suppose that checking the "accept inbound mail connection
from all ip addresses" should mean to accept any connection through this interface ??

Whta's wrong here ? You can try it from anywhere using the specified ip address...

Thanks in advance,
Laszlo

discussion Filed Under:

Comments

fferaboli's picture
18
Nov
2009
1 Vote +1
Login to vote

Hi, can you tell me the IP

Hi,

can you tell me the IP address you are telnetting FROM?

thanks,

Federico

Lacko's picture
18
Nov
2009
0 Votes 0
Login to vote

Hi, yes, of

Hi,

yes, of course: 84.1.59.139. Why is this important ?

Thanks,
Laszlo

fferaboli's picture
18
Nov
2009
1 Vote +1
Login to vote

Hi, that IP address has a bad

Hi,

that IP address has a bad reputation if you check here:
www.symantec.com/business/security_response/landing/spam/index.jsp

Enter the "from" IP address on the "Sender IP lookup" window and see the result. You'll see it is listed under a 3rd party Spam List (PBL) that SBG uses and that's the reason why you are not allowed to connect. It also means that SBG is working properly in that regards so that's good. You can expect to stop most of the spam via reputation.
If you click PBL on the result you got (is also a link) you will see more information about that list.
Hope this helps.

Regards,

Federico