Topic: Email problems

[decleene]

I have a client running SME Server 7.2.  POP access from outside the network is not working as of yesterday.  If I try to telnet to port 110 on the mail server I get an error.  I also get a cannot connect to your incoming mail server when using Outlook.  Local network access seems to work without any issues.

Email settings - allow private and public for both POP3 and IMAP

I did try to disable POP access yesterday as I thought they had moved moved both their website and their email to another provider.  After finding out that it was just their website and not their email, I turned it back on.  I have also rebooted the server since making that change.  POP access still not working.

Any ideas?

[mercyh]

How did you "try to disable"? It sounds like you were successful.

Is this server set up as gateway? If it works normally inside the LAN, it almost has to be a firewall setting.

[mercyh]

What does

Code: [Select]

config show pop3
and

Code: [Select]

config show imap
return?

[CharlieBrady]

How did you "try to disable"? It sounds like you were successful.

SME 7.3 no longer offers an option to enable via the server-manager cleartext POP or IMAP access from the Internet. If a system already had it, it's possible to disable it, but then the only way to enable it is from the command line via "config setprop".

The reporter should use pop3s or imaps rather than pop3 and imap. Plaintext protocols allow usernames and passwords to be sniffed in transit.

[mercyh]

If you decide to not take Charlie's good advice to not open this. Be aware that using

but then the only way to enable it is from the command line via "config setprop".

only makes the option available in server manager. It does not actually enable it you will also need to go into server-manager and select it.

[decleene]

Currently running SME Server 7.2.  I disable it using the server management console under email settings/change settings.  I set the drop down to disable.  I then later went back and set it back to private and public access.


Server is set to serveronly mode.

Where do I run the config commands?  Can that be done from the server management console?  or do I have to be physically at the server to run them? If I go to the server directly and login my options are as follows:

1. check status
2. configure      ( i looked at this option, but it appears to walk through server configuration, wasn't sure if that was the right place)
3. test internet
4. reboot, reconfigure, shutdown
5. manage disk redundancy
6. access server manager
7. view support info
8. perform backup to USB
9. exit

Thanks,
Scott

[mercyh]

Scott,

It needs to be run at the console.

You need to login as root instead of as admin this will give you a "command line" prompt.
See here: http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter6#Accessing_the_Linux_Root_Prompt 
This can be done with putty installed on a workstation. You can download putty from here: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html.

You will also need to change the Secure Shell Settings in server-manager, see here (to use putty remotely):
http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter11#Remote_Access

[mercyh]

You need to get this unit updated to the current version (7.3) if possible.

I do not have a 7.2 to check what settings are available but on 7.3 the options are allow private, Disable, and allow private and public (Secure POP3S). The third option only allows POP3 SECURE from the WWW. POP3S is a different protocol and requires a different port to be forwarded. Check in server-manager which options you have available. If you already have the one below you should not need to go "under the hood" to enable it.

If you use the "config setprop" command at the root prompt it will give you another option in that menu Allow both POP3 and POP3S. This is the one that allows both protocols from LAN and WAN.

the actuall full command to enable is documented here:

http://wiki.contribs.org/SME_Server:Documentation:FAQ#Allow_external_pop3_access

[decleene]

Thanks for all of the info.  The mail server appears to have come back, but previously the owner was able to access his mail from outside the network (home) without SSL turned on in Outlook.  Now it doesn't work unless SSL is turned on.  Can I turn off SSL from outside the network?  The only reason I ask is because he is now getting a ton of spam, because his Norton isn't compatible with SSL and he wants it to work the way is was before.  I did mention that non-SSL is a security risk, but he's more interested in having things back to the way they were a week ago.