Topic: SME behind firewall - POP3 and SMTP with auth from external

[Blackbox]

Hi everyone,
Maybe I am going nuts but this is what my boss wants.

This is my scenario:

I got an IPCOP firewall with a DMZ. MY SME server is connected to the DMZ with an IP Address of 192.168.3.2 installed as Server Only.

My need both my internal clients and my external clients to use standard POP3 (110) and SMTP with Authentication on port 25.

From what I saw in the Server manager, there is no public SMTP with Authentication.

Don't ask me why I don't use Secure SMTP. My boss does not want it as several PDAs in the building are old and they only have standard SMTP with authentication in their software.

Can this be done please?

[JonB]

Yes you can do it.

A security warning first though. Usernames and passwords will be passed in plain text. If anyone is sniffing your connection they may well be able to get authenticated access to your mail server.

From console

Code: [Select]

# config setprop smtpd Authentication enabled

You will now have under the Email settings - SMTP Authentication an option to select both SMTP and SSMTP.

Code: [Select]

# config setprop pop3 access public

You will now have under Email settings - POP3 Server Access an option to select both POP3 and POP3S.

The above will allow SMTP Auth on port 25 and POP3 access on port 110 from the external network.

On the internal network all users have access to POP3 on port 110 and access to SMTP port 25 without authentication by default.

Jon

[Blackbox]

First of all, I want to thank you for your prompt and successful reply.

I can see the new options in the server manager.

Being new, I went through the forum and found an interesting command that is used many time when something is change:

signal-event email-update

What does it do? Do I need to run this command after applying the pop3 and smtp commands?

Any help is appreciated.

Thanks[/b]

[raem]

Blackbox

> signal-event email-update

When you make any changes to email settings using the server manager panel, that command will be run anyway to update & enable the new configuration, so no need to seperately do it.