Topic: securemail ports not opening when they should

[John Lewis]

I'm running SME5.5U2.  I downloaded and installed Damien's securemail RPM's from http://www.pagefault.org/download/RPMS/noarch/ and the http://untroubled.org/cvm/rh7/cvm-0.11-1.i386.rpm

I set the IMAPS, POPS and SMTPS to be accessible by public in the web panel and clicked save...

However, the ports aren't open from the outside

Here's the NMAP scan result from the outside
465/tcp    closed      smtps
993/tcp    closed      imaps
995/tcp    closed      pop3s

So I checked /etc/init.d/masq and the rules were there:
    /sbin/ipchains --append input -p tcp -s 0/0 -d $OUTERNET 993 -j ACCEPT
    /sbin/ipchains --append output ! -y -p tcp -d 0/0 -s $OUTERNET 993 -j ACCEPT
   /sbin/ipchains --append input -p tcp -s 0/0 -d $OUTERNET 995 -j ACCEPT
    /sbin/ipchains --append output ! -y -p tcp -d 0/0 -s $OUTERNET 995 -j ACCEPT
    /sbin/ipchains --append input -p tcp -s 0/0 -d $OUTERNET 465 -j ACCEPT
    /sbin/ipchains --append output ! -y -p tcp -d 0/0 -s $OUTERNET 465 -j ACCEPT

So I did a /etc/init.d/masq restart

And the ports were still closed...  Weird...

I can't find any logs indicating errors, rejections etc.  Any tips on where I could look?  Would love to get this up and running...

Again, thanks.

[Paul Wolsink]

Hi There
I don't know the answer on this problem, but I have a question and thought it wise to ask it in this thread as it is kind of related.

If the SSL of Damien is installed and you connect from the outside on these new SSL ports 993/995, etc, what happens to the old ports of 25,110, etc.
Can they still be used but then without SSL or is it the gone with the old open way of connecting?

What about from the internal Network? Can you set it up to connect on port 25/110 from an internal network , but SSL 993/995 from outside?

Reason why I'm asking as that from the outside I would like to have SSL, but I also have Nokia Communicator and I can only use 25/110 and can make a dial-in connection with modem for example. There is no ways I can upgrade or use tunneling with the communicator.
But I do want SSL for other remote users.

Advise will be welcome!

regards
Paul