Hi,

I've been trying to get qpopper configured for a few days now, and after
lots of false starts (no thanks to M*cr*s*ft Outl**k or Outl**k Express) I
think I've tracked the problem down to ipchains.

When trying to connect using Express, I get the following errors:-

The connection to the server has failed. Account: 'xxxxxx.com', Server:
'mail. xxxxxx.com', Protocol: SMTP, Port: 25, Secure(SSL): No, Socket Error:
10061, Error Number: 0x800CCC0E

The connection to the server has failed. Account: 'xxxxxx.com', Server:
'xxxxxx.com', Protocol: POP3, Port: 110, Secure(SSL): No, Socket Error:
10071, Error Number: 0x800CCC0E

Now, na�ve me assumed that the comment about SSL meant it was trying to use
SSL to connect to the port.

However, if I remove the following rule from ipchains:-

REJECT     tcp  -y----  anywhere             anywhere              any ->
any

Then the pop3 connection works. I need to do the equivalent for SMTP also,
as I understand it.

Now, what I'm a little confused about is whether this is the correct &
safest way to configure ipchains to allow qpopper to work?

I need to allow any external client with a valid IP address to connect via
pop3 and SMTP using using the appropriate ports.  Presumably it's a good
idea to reject invalid IP addresses and to reject connections that appear to
come from the internal network address.  I guess there is more I can do to
secure things by using APOP, SSL, etc. but first things first.

I would be grateful for any help.

Thanks,
Phil




Reply via email to