Use Foxmail Server with common firewalls

FoxmailServer can run and use normally in the default settings of most commonly used software firewalls. Many software firewalls contain access control for applications. For such software firewalls, you must first start the firewall program and then run Foxmail Server. You can use Webmail to send a test letter to an external domain, in the dialog box that appears in the firewall, grant the foxmta.exe?syssetup.exeand reg.exe related to Foxmail server permanent access permissions. Take deletecclient Firewall as an example, as shown in:

TOP

The following are some software firewalls with strict default setting rules, which must be set according to the instructions. Otherwise, the normal operation and use of Foxmail Server may be affected.

[Mcafee. personal firewall plus]

1. Open the PersonalFirewall console and select InternetApplications.

2. Select New Allowed Application to add a program for access

3. Add foxmta.exe?syssetup.exeand reg.exe under the Foxmail serverinstallation directory and grant the Allow Full Access permission.

The default installation directory is: C: FoxServerMTAFoxMTA.exe C: FoxServerMTASysSetup.exe C: FoxServerMTAreg.exe.

For more information, see the Symantec Client Firewall example.

4. Enter the Utilities Option

5. Select System Services

6. Enable Mail Server (POP3) 110 and Mail Server (SMTP) 25 ports

7. Foxmail Server uses port 80 for WebMail. enable port 80 for Web Server (HTTP ).

TOP

[ETrust. EZ. Armor. v2.0.6 Retail]

1. Open the EZ Firewall management interface and go to Program Control

2. Use Add to Add programs related to Foxmail Server to the access list

Add foxmta.exe?syssetup.exeand reg.exe under the Foxmail serverinstallation directory and grant Access and Server Permissions

The default installation directory is: C: FoxServerMTAFoxMTA.exe C: FoxServerMTASysSetup.exe C: FoxServerMTAreg.exe.

For more information, see the Symantec Client Firewall example.

3. Enter the Custom option of Internet Zone Security

4. Open the corresponding ports, such as 25 (SMTP), 110 (POP3), 80 (default WebMail port)

For more information, see the Mcafee. personal firewall plus example.

TOP

[Alibaba Cloud Personal Firewall 2.51]

Cancel the rules "prohibit all users from connecting to low-end ports" and "prohibit all users from connecting" in the IP rule.

TOP

　　For software firewalls, Foxmail server can run and use normally as long as the following two points are met.

1. GRANT access permissions to programs related to Foxmail Server, including:

Foxmail serverserver server program foxmta.exe

System Configuration program syssetup.exe of Foxmail Server

Reg.exe, the management tool of Foxmail Server

2. Open the corresponding port

Open the ports corresponding to the services you need. You can choose Control Panel> network connection> Local Connection> General> Internet Protocol (TCP/IP) -> properties-> advanced-> options-> TCP/IP filtering-> Custom Attributes Based on actual conditions.

The SMTP Inspection function of the firewall should also be disabled to enable support for esmtp, auth login/plain for SMTP authentication.

TOP

　　Cisco PIXHardware firewallDisable MailGuard.

When SMTP sending authentication is set, it is impossible to send emails to external domains outside the firewall.

You can use the following command to perform a test:

1) Telnetyourserverip 25, 220 ************************************** ****

2) enter the EHLO command, and the 502 unimplemented (#5.5.1) is displayed)

Solution:

Disable Mailguard in Cisco PIX (which limits the minimum set of SMTP commands to a specific command. cisco's PIX Firewall allows the Mail Guard feature by default. This feature enables internal email servers to receive only commands HELO, MAIL, RCPT, DATA, RSET, NOOP, and QUIT in section 4.5.1 of RFC 821, all other commands are rejected, and the response code is "500 unknown commands ". Auth login is also a command out of section 4.5.1 of RFC 821. In this case, you can use the no fixup protocol smtp 25 command to delete the SMTP protocol repair settings in the configuration to disable protocol repair.