CSF Possibly Blocking Gmail

[screege]

Should this be ok?

tcp6_in: 20,21,22,25,53,80,110,143,443,465,587,993,995,2077,2078,2082,2083,2086,2087,2095,2096

tcp6_out:
20,21,22,25,37,43,53,80,110,113,443,465,587,873,993,995,2086,2087,2089,2703

udp6_in: 20,21,53

udp6_out: 20,21,53,113,123,873,6277

Regards

[Anky_B]

What is the Solution ?
i am facing same problem & did everything that above written.

@ZeroNine you should atlest inform how did you resolved this problem so other ppl also can find the solution.

[postcd]

The solution can be to add Googles IP range: 74.125.0.0/16
into ignore list (maybe /etc/csf/csf.ignore)

AND

delete all existing block rules for that google IPs from csf.deny file. just search that "74.125" lines and delete them. Save file and restart csf.

[il_dandi]

I tried same things but doesn't works.

Allow incoming IPv6 TCP ports
TCP_IN = 20,21,22,25,26,53,80,110,143,443,465,587,993,995,2077,2078,2082,2083,2086,2087,2095,2096

Allow outgoing IPv6 TCP ports
TCP_OUT = 20,21,22,25,26,37,43,53,80,110,113,443,587,873,993,995,2086,2087,2089,2703

And this works, means that I can send mail in my websites when I set Gmail account as SMTP.

Strange thing is that after 1 days (or 2) this services stops to work, I've simply to restart Firewall CSF and after this action, send mail works again.
I tried to restart without clean DENY IP, and is OK! Service starts again also without clean DENY IP. Simply he need that I restart CSF Firewall for make working.

I tried many things and settings but are months that I can't find a solution. Do you've any idea?

[raf_slasher06]

hello guys I have csf v7.16...

I have open port 465-25-995-993-587 etch

but still gmaail incoming emails cant pass trough when csf is enable

I can only receive gmail emails if I disable csf

[Sergio]

It could be that your firewall is blocking gmail ips, try to add those ips into your firewall.

To find what ips gmail uses, read the following:
https://briansnelson.com/How_to_find_GM ... t_Firewall

[raf_slasher06]

I did try to ignore those you've give Sir Sergio

216.239.32.0/19
64.233.160.0/19
66.249.80.0/20
72.14.192.0/18
209.85.128.0/17
66.102.0.0/20
74.125.0.0/16
64.18.0.0/20
207.126.144.0/20
173.194.0.0/16

But still, unsucessfull..

[Sergio]

Try to do this:
- Go to ConfigServer Security & Firewall
- Go to "Search System Logs"
- Select "/var/log/exim_mainlog"
- Search for one specific gmail address that is giving you the connection error
- Copy and paste a few lines with the errors..

[raf_slasher06]

I see nothing on /var/log/exim_mainlog when it comes to gmail incoming email log.

I can only see gmail incoming email log evry time my csf is disable.

While when i telnet smtp.gmail.com 465 - telnet smtp.gmail.com 587 - telnet smtp.gmail.com 995, all of them is connected to smtp.gmail.com

Do I have to consider uninstalling csf and reinstall it again?

[Sergio]

Ok, do this:
Open WHM -> Service Manager
Look for "Allow exim to listen on a port other than 25", What ports have you declared there?