Re: shorewall IMAP

2011-02-14 Thread Sjoerd Hardeman

Paul Cartwright schreef:
I was having a problem today, trying my laptop  IMAP from my debian 
desktop. I looked in the rules file,  figured out why my web server 
wasn't working. It only showed port 80, but I had changed apache to port 
81, forgetting about shorewall! When I saw the port 80 in there, I 
changed it to 81  apached started working again.


But I am still having a problem getting IMAP mail from the desktop via 
IMAP to my laptop. When I turn off shorewall I get the mail.

Here is what I added to rules:

# grep IMAP rules
# IMAP server
IMAP/ACCEPT net   $FW
IMAPS/ACCEPTnet   $FW


what else do I need for shorewall to let me get IMAP email ?

Running the firewall on your desktop? Then you need
IMAP/ACCEPT $FW net
IMAPS/ACCEPT$FW net

You can try if it works by telnetting from your laptop to your desktop 
on port 143 (plain) or 993 (ssl). Check in the main time your 
/var/log/messages on the desktop to see if any blocked traffic has been 
logged.


Good luck!
Sjoerd



signature.asc
Description: OpenPGP digital signature


[Fwd: Re: shorewall IMAP]

2011-02-14 Thread Sjoerd Hardeman

A copy to the list for the archive
---BeginMessage---

On 02/14/2011 04:39 AM, Sjoerd Hardeman wrote:

IMAP/ACCEPT $FWnet
IMAPS/ACCEPT$FWnet

You can try if it works by telnetting from your laptop to your desktop 
on port 143 (plain) or 993 (ssl). Check in the main time your 
/var/log/messages on the desktop to see if any blocked traffic has 
been logged. 


thanks,
I knew it was a shorewall problem, because ssh works, and apache worked 
after I added the port 81.. My ISP put in a new ADSL modem/router that I 
have no admin rights on, so  I am not sure what gets in from the outside..
I am just concerned about my little subnet, checking email from a laptop 
right here locally..


--
Paul Cartwright

---End Message---


signature.asc
Description: OpenPGP digital signature


Re: [Fwd: Re: shorewall IMAP]

2011-02-14 Thread Paul Cartwright

On 02/14/2011 06:09 AM, Sjoerd Hardeman wrote:

A copy to the list for the archive


I need to change that default from replying to the user, to replying to 
the list.. I normally highlight what I want to reply to  hit CTRL-R.
There is probably a way to change that in Eudora OSE, I'll just have to 
find it..

Think Thunderbird..

--
Paul Cartwright



Re: [Fwd: Re: shorewall IMAP]-reply-to-list

2011-02-14 Thread Paul Cartwright

On 02/14/2011 06:09 AM, Sjoerd Hardeman wrote:

A copy to the list for the archive


ok, I see what I was doing wrong. In Eudora, CTRL-R is reply, it replies 
to the person. CTRL-SHFT-L replies to THE LIST..

I didn't realize Eudora had that function.

--
Paul Cartwright



Re: [Fwd: Re: shorewall IMAP]-reply-to-list

2011-02-14 Thread Sjoerd Hardeman

Paul Cartwright schreef:

On 02/14/2011 06:09 AM, Sjoerd Hardeman wrote:

A copy to the list for the archive


ok, I see what I was doing wrong. In Eudora, CTRL-R is reply, it replies 
to the person. CTRL-SHFT-L replies to THE LIST..

I didn't realize Eudora had that function.

No problem. And a day you learned something is a good day, isn't it?

Sjoerd



signature.asc
Description: OpenPGP digital signature


shorewall IMAP

2011-02-13 Thread Paul Cartwright
I was having a problem today, trying my laptop  IMAP from my debian 
desktop. I looked in the rules file,  figured out why my web server 
wasn't working. It only showed port 80, but I had changed apache to port 
81, forgetting about shorewall! When I saw the port 80 in there, I 
changed it to 81  apached started working again.


But I am still having a problem getting IMAP mail from the desktop via 
IMAP to my laptop. When I turn off shorewall I get the mail.

Here is what I added to rules:

# grep IMAP rules
# IMAP server
IMAP/ACCEPT net   $FW
IMAPS/ACCEPTnet   $FW


what else do I need for shorewall to let me get IMAP email ?

--
Paul Cartwright


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4d58848a.5020...@pcartwright.com



shorewall: imap doesn't work any longer

2003-10-09 Thread Vittorio
I have setup a debian 3.0 server functioning as a gateway, router,
**IMAP SERVER**, and firewall. It connects to the internet via a DSL
ppp0 connection and to the internal network through eth1.

Being an absolute beginner, I've set up shorewall with a basic
configuration suggested in the net. Since then the imap connection
from client to server isn't working any longer (the server collects
mail from the internet; the mail is read by clients by means of imap).

How should I configure shorewall to make the imap server work again
(the imap traffic is between server's eth1 interface and client eth0
interface)?

Step by step instructions will be highly appreciated.

Ciao

Vittorio



pgp0.pgp
Description: PGP signature


Re: shorewall: imap doesn't work any longer

2003-10-09 Thread Roberto Sanchez
Vittorio wrote:
I have setup a debian 3.0 server functioning as a gateway, router,
**IMAP SERVER**, and firewall. It connects to the internet via a DSL
ppp0 connection and to the internal network through eth1.
Being an absolute beginner, I've set up shorewall with a basic
configuration suggested in the net. Since then the imap connection
from client to server isn't working any longer (the server collects
mail from the internet; the mail is read by clients by means of imap).
How should I configure shorewall to make the imap server work again
(the imap traffic is between server's eth1 interface and client eth0
interface)?
Step by step instructions will be highly appreciated.

Ciao

Vittorio

Vittorio,

These are the lines I have in my /etc/shorewall/rules file:

ACCEPT  net   $FW   tcp 993
ACCEPT  loc   $FW   tcp 993
These are for imaps (IMAP over SSL).  For imap2 open port 143, and
for imap3 port 220.
My setup is this:

(eth1) (eth0)
local - FW Box  net
Hope this helps,

-Roberto


pgp0.pgp
Description: PGP signature


Re: shorewall: imap doesn't work any longer

2003-10-09 Thread Doug MacFarlane
On Thu, 2003-10-09 at 08:12, Vittorio wrote:
 I have setup a debian 3.0 server functioning as a gateway, router,
 **IMAP SERVER**, and firewall. It connects to the internet via a DSL
 ppp0 connection and to the internal network through eth1.
 
 Being an absolute beginner, I've set up shorewall with a basic
 configuration suggested in the net. Since then the imap connection
 from client to server isn't working any longer (the server collects
 mail from the internet; the mail is read by clients by means of imap).
 
 How should I configure shorewall to make the imap server work again
 (the imap traffic is between server's eth1 interface and client eth0
 interface)?

Out of the Box, Shorewall is configured to DENY connections from the
Internet to the Shorewall host (typically referred to as fw in the
/etc/shorewall config files).

You need to create a rule to let hosts from the Internet zone connect to
the imap service on fw.  I don't recall what port imap is off the top of
my head.

The config files or the examples on shorewall.net for enabling ssh to
the fw machine from a static IP on the Internet are instructive here. 
If you know the static IPs of the clients, you can create a zone for
them, and follow that config.

madmac



 
 Step by step instructions will be highly appreciated.
 
 Ciao
 
 Vittorio
 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]