Chimera Computing Ltd

EFS - Secure Pop3

HOW TO RUN EFS TO COLLECT VIA POP3S (SSL)

BACK

Natively, EFS does not support POP3S (secure POP3) However, there is simple workaround for this using a very good product called "stunnel". This software 'proxies' the standard EFS POP3 port connecting securely via POP3S. It is exceptionally easy to install and configure, has a small footprint and can run on the same server as EFS (optionally as a service).

Perform the following:

1. Download the latest "stunnel" binary (.exe) from the following location http://www.stunnel.org/

2. Install sTunnel on the same machine as EFS.

3. Create an 'stunnel.conf' file in the stunnel program folder that contains the following (replacing the 'pop3.isp.com:995' portion to be your ISP's POP3S server and port)

client = yes
debug = debug

[pop3s]
accept = 127.0.0.1:1109
connect = pop3.isp.com:995

[smtps]
accept = 127.0.0.1:259
connect = smtp.isp.com:465


4. Change the Pop3 server in EFS to point to 127.0.0.1 and the port to be 1109

5. Optionally, if your ISP supports SMTPS (secure SMTP) then point your local mail server smart host entry (assuming you are configured to use a smart host) to be 127.0.0.1 and port to be 259 and the 'smtp.isp.com:465' to be the remote ISP SMTPS server. Outbound traffic from your mail server to the Internet is then proxied through sTunnel

Essentially EFS connects locally to stunnel on port 1109, and stunnel acts as an intermediary proxying the standard EFS Pop3 port via a secure Pop3 tunnel to your ISP. You can alter the "listening" ports in the config file and EFS if the respective ports are already in use.


(Chimera Computing Ltd)