[Randall: It would seem prudent for Qualcomm to document in the qpopper
knowledge base how to deal with Norton AntiVirus considering how many
hoops you have to jump through to get it to work.  You can bet Symantec
won't do it.]


All,

This problem was solved a couple weeks ago and I wanted to publish what I
did in the event that someone else stumbles upon the same issue.

Thanks! to all who responded from this list, comp.mail.sendmail and
[EMAIL PROTECTED]


Statement of the Problem:  Outlook 2000 fails to retrieve mail over SSL POP3
using QPopper 4.0.4

Environment: Solaris 2.5.1 / QPopper 4.0.4 / OpenSSL 0.9.6b / Sendmail
8.12.3 / SASL 1.5.27 / Outlook 2000 / NT4 SP6a

Description: As I understand it, QPopper 4.0.4 contains support to use the
110 port for both SSL/TLS and non-SSL/TLS connections. I can get QPopper
4.0.4 to work with SSL/TLS over alternate port of 995 but since Norton
AntiVirus E-Mail scanning doesn't support any non-standard ports, I can't
use 'tls-support=alternate-port'.

Solutions:

Client: Outlook

Recommended Solution: Throw out Norton.

Unlike other virus scanners, Norton works with a proxy and refuses to scan
any mail that does not use the standard SMTP and POP3 ports of 25/110. To
make matters more complicated, Outlook does not support 'stls' so you have
to use SSL over POP3 on port 995. This means that Outlook and Norton
AntiVirus are mutually exclusive if E-Mail scanning of SSL POP3 is desired.

Implementing another E-Mail virus scanner (e.g. McAfee) allows Outlook to
retrieve POP3 over SSL and still catch any E-Mail borne virus. Run a pop3s
service on port 995 and point it to a qpopper config that is configured to
use 'set tls-support = alternate-port'.

P.S. Even Avast (http://www.asw.cz/alwil.htm) works better with SSL than
Norton.

Alternate Solution: Reconfigure Norton to turn off E-Mail scanning. The
On-Access scan will continue to catch any virus but only on access, not on
POP3 RETR or on outbound SMTP.



Client: Eudora

Easy Solution: Reconfigure Norton to turn off E-Mail scanning. The On-Access
scan will continue to catch any virus but only on access, not on POP3 RETR
or on outbound SMTP.

Somewhat Involved Solution: If you really must use Norton AntiVirus and
Eudora, you must reconfigure it to use 'Manual Configuration' otherwise SSL
POP3 will continue to crash and burn.

1.      Run Norton AntiVirus

2       Click "E-Mail Status"

3.      Double-click the line corresponding to your SSL E-Mail account.

4.      Answer "Yes" when asked if you want to open the options screen now?".

5.      DISABLE the SSL E-Mail client that Norton AntiVirus is protecting
clearing the check mark in the box.  Your E-Mail will still be  protected by
Norton AntiVirus though the configuration will occur    manually in the
following steps.

6.      Under "Internet", expand the "Email Protection" tree.

5.      Select "Advanced".

6.      Enable "Enable Manual configuration".

7.      Click "OK" to close the "Options for Norton AntiVirus" window.

8.      Verify that your SSL E-Mail account shows "Not protected" and that
"Manually configured accounts" appears in the list with a large green   check
mark next to it.  If it doesn't appear this way, quit Norton    AntiVirus,
start it again and then click "Email Status". Norton    AntiVirus seems to
have a problem refreshing after option changes in       "EMail status".

9.      Quit Norton AntiVirus.

Run a pop3 service on port 110 and point it to a qpopper config that is
configured to use 'set tls-support = stls'.

Hope this helps anyone who may stumble upon this same scenario in the
future.


R. Damian Koziel

Reply via email to