Topic: Port forwarding for Webmail

[Damian]

Hi All,

We have an SME 6 box running in server mode protected by an IPCop firewall. We already have a site webserver internal and is accessed from the net via forwarding port 80 on the IPCop box to it.

We'd like to add access to webmail on the SME box from outside too and have tried forwarding a higher port on IPCop to port 80 on the SME box (sme.mydomain.com:750 -> sme:80). This gets us to the login screen for webmail but  after logging in the url dumps the :750 part and therefore goes to the site webserver (not the sme box).

Is there any way we can access the SME webmail when it's in server mode and is not the default webserver for the site ?

Cheers,

Damian

[8stargen]

How is IPCop set up? Why are you running a server internally that’s public available? Or are you running the server in the DMZ or Orange zone?

Ideally... anything publicly accessible ie. web, mail, ftp server, should be on the DMZ or Orange Zone. You local network should be contained in the Green Zone. That way if your server is breached your local network remains unexposed. Hence the name DMZ (De-Militarised Zone)

Why can't you have 1 server for all mail?

To make this work you will need to edit the apache conf. and possibly some masq settings to cause the webserver (apache) to listen on another port. I'd like to know how your network is arranged first.

Cheers,

[hamishau]

Alternatively, you could enable the SME webmail to be HTTPS only (in server-manager).

Port forward 443 to <your SME server IP address>. Then use https://yourdomain.com/webmail to access it. That should get around all your issues.

Hamish

[Damian]

Thanks 8stargen & Hamishau,

The answer for me was forwarding 443 and connecting as https://...

Kicking myself because I should have thought of it but it's been a tough week

Many Thanks

Damian