Topic: Problem accessing POP & IMAP

[ElFroggio]

My domain is 911networks.com: 64.180.83.22. The server is behind an ADSL router/firewall (Actiontec V1000H). Yesterday the Internet speed was getting slow so I rebooted the router firewall and now the external users (1 office - 2 people) cannot pickup the POP mail:

I have setup the remote users' IP in the local network: 184.71.164.54/255.255.255.255 router: 192.168.1.254 the IP address of the actiontec. The SME server is: 192.168.1.14

In the Actiontec firewall I have:

Code: [Select]

Port             Destination
80/80 TCP 192.168.1.14 80/80
443/443 TCP 192.168.1.14 443/443
25/25 TCP 192.168.1.14 25/25
110/110 TCP 192.168.1.14 110/110    <=====
143/143 TCP 192.168.1.14 143/143    <=====
585/585 TCP 192.168.1.14 585/585
993/993 TCP 192.168.1.14 993/993
53/53 UDP 192.168.1.14 53/53
When I scan the ports, I only get:

Open: 25/80/443/993

I have called the Telco that supplied the router/firewall, "Oh we do not deal with that". I have called Actiontec and been told: "Sorry but you have to talk to your provider".

I have not found a way of completely disabling the firewall.

Any suggestion?

Move the POP3 to another port? How?
Get the darn ... to work? So far, I've tried all the various combinations and can't get it to work.

Thanks

[mmccarn]

Are the remote users connecting to the SME server then failing, or are they actually being blocked by the firewall? You should be able to find this out by looking at /var/log/pop3/current and/or /var/log/imap/current.

Are you able to convince your remote users to enable SSL encryption?  Then just switch from pop3 to pop3s (port 995) and from imap to imaps (port 993).

Unless you've made specific changes to your server to allow unencrypted remote access to pop3 and imap, these services may be using TLS for encryption - TLS on my system failed until I adjusted the MTU size on my SME server; see http://bugs.contribs.org/show_bug.cgi?id=6888 for more info (the bug discusses qpsmtpd, but I believe that it affected my ability to use TLS on port 25 when relaying email from off-site through my SME).

[CharlieBrady]

Then just switch from pop3 to pop3s (port 995) and from imap to imaps (port 993).

I would go further and suggest ignoring the obsolete pop3 protocol, and just use imaps, which you have already shown is open.