Thread: pop3 open?
View Single Post
Old 03-06-2004, 19:56   #17
greencreeper
Inactive
 
Join Date: Nov 2003
Location: Leeds - the dog house
Age: 49
Services: Email me for a current price list
Posts: 8,270
greencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny star
greencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny stargreencreeper has a nice shiny star
Re: pop3 open?

Quote:
Originally Posted by SMHarman
Your mail client is effectivly asking a local port 110 for mail. That then tells ZA to ask the pipex mail server. It drops it into the ZA inspection area, checks it then passes it back to the mail client.

Port 110 has to be open for this to work.

If you look at the pop mail settings in your mail client they will be slightly different to those you may have originally input as ZA has modified them to act in this manner.
I have Zone Alarm Pro and Spampal. The latter listens on 127.0.0.1 and only accepts connections from 127.0.0.1. Indeed, if it listens on 127.0.0.1 then it's not able to accept connections from the outside. Installing Zone Alarm didn't change any settings nor would I expect it to. Port 110 only has to be open locally and be locally addressable for everything to work. I can't see why any proxy or server would have to globally addressable in order to work correctly - Apache works fine with 127.0.0.1, for example.

The Bat ---> Spampal ---> ZA ---> NTL MTA
NTL MTA ---> ZA ---> Spampal ---> The Bat

A Shields Up port scan gave my system a "perfect "TruStealth" rating" - i.e. no ports are open. If Russ is scanning and can connect to port 110, then the email proxy is globally addressable and I don't see any reason for this other than if you wanted to provide spam filtering for others.

Look at the settings for the software listening on 110 rather than trying to configure ZA to block the port!

greencreeper is offline   Reply With Quote