Differences

This shows you the differences between two versions of the page.

--- how_to:allow_remote_access_to_vpop3_mailboxes [2009/05/14 14:26] – created mike
+++ how_to:allow_remote_access_to_vpop3_mailboxes [2018/11/14 10:45] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
-=====Allow Remote Access to VPOP3 Mailboxes=====
+======Allow Remote Access to VPOP3 Mailboxes======
-Sometimes people want to be able to access their office VPOP3 mail server from a remote site.
+Sometimes people want to be able to access their office VPOP3 mail server from a remote site or mobile phone etc.
-====With a permanent Internet connection====
+These instructions assume you have a permanent Internet connection (eg ADSL, Cable etc). If you don't have a permanent Internet connection, see [[RemoteAccessDialUp|here]]
-If you have a permanent connection to the Internet (eg leased line, xDSL etc) it is usually quite easy. Simply set your router up to allow incoming access to the VPOP3 computer on the relevant ports (eg 110 for POP3, 143 for IMAP4, 25 for SMTP, 5108 for WebMail). The remote user then dials to the Internet and connects to your VPOP3 server's Internet IP address.
-By default VPOP3 2.0.0 and later will //refuse// access to email for anyone connecting from outside the local network, so this will need to be opened up. The easiest way to do this is to go to ''Services -> POP3'' (or ''Services ->IMAP4'' or ''Services -> WebMail'', as appropriate), and find the ''Access Restrictions'' section.
+=====Router/Firewall Configuration=====
+First you need to set your router and/or firewall to allow incoming access to the VPOP3 computer on the relevant ports (eg 110 for POP3, 143 for IMAP4, 5108 for WebMail/CalDAV).
-In VPOP3 2.4.0 and later, click on the ''Add New Restriction'' text, choose ''Type: Any'', then in the ''Allowed Users'' box, either leave it blank to allow any user to access the VPOP3 service from the Internet, or enter a list of VPOP3 usernames, separated by spaces, to just allow those users to access VPOP3 from the Internet
+This includes if you are using a software firewall, such as the Windows firewall, or other Internet Security software.
-In earlier versions of VPOP3, add the line ''0.0.0.0 0.0.0.0'' to the ''Access Restrictions'' settings. (This will allow access to anyone with a valid username and password from any IP address - you may want to [[VPOP3 Access Security|restrict it to certain users only]]).
+With the Windows firewall or Internet security software, you may need to 'allow' VPOP3 to act as a service on the Internet and also allow the specific ports through the software firewall as well.
+=====VPOP3 Configuration=====
+By default VPOP3 will //refuse// access to anyone connecting from outside your local network, so you need to tell VPOP3 to allow access from anywhere.
-Note do NOT simply allow access to anyone to your VPOP3 SMTP service, this will lead to you making VPOP3 into an open relay. Instead you will need to [[Allowing Mail Relay Through vPOP3|set the SMTP service access restrictions]] to limit access to your users alone.
+====VPOP3 6.0 or later====
+In VPOP3 6.0 or later, go to **Services -> POP3** (or **Services -> IMAP4**, or **Services -> Webmail**, as appropriate). Then, go to the **IP Access Restrictions** tab. Press the **Add** button. Choose **Allow** and **Type: Any Host**, then in the **Allowed Users** box, either leave it unchanged to allow any user to access the VPOP3 service from the Internet, or select one or more VPOP3 usernames to just allow those users to access VPOP3 from the Internet.
+{{:how_to:accessrestrictions1.png?nolink|}}
+Screenshot from VPOP3 v7.0
-====Without a permanent Internet connection====
+====VPOP3 3.0 to 5.0====
+In VPOP3 3.0 to 5.0, go to **Services -> POP3** (or **Services -> IMAP4**, or **Services -> Webmail**, as appropriate). Then, go to the **IP Access Restrictions** tab. Press the **Add New Restriction** link. Choose **Allow** and **Type: Any Host**, then in the **Allowed Users** box, either leave it blank to allow any user to access the VPOP3 service from the Internet, or enter a list of VPOP3 usernames, separated by spaces, to just allow those users to access VPOP3 from the Internet.
+====VPOP3 2.4 to 2.6====
+In VPOP3 2.4 to 2.6, go to Services -> POP3 (or other service as appropriate), and find the **Access Restrictions** setting. Press the **Add New Restriction** link. Choose **Type: Any**, then in the **Allowed Users** box, either leave it blank to allow any user to access the VPOP3 service from the Internet, or enter a list of VPOP3 usernames, separated by spaces, to just allow those users to access VPOP3 from the Internet.
+====VPOP3 2.3 or earlier====
+In earlier versions of VPOP3, go to Services -> POP3 (or other service as appropriate), and find the **Access Restrictions** setting. Add the line ''0.0.0.0 0.0.0.0'' to the ''Access Restrictions'' settings. (This will allow access to anyone with a valid username and password from any IP address - you may want to [[VPOP3 Access Security|restrict it to certain users only]]).
+====SMTP====
+Note do NOT simply allow access to anyone to your VPOP3 SMTP service, this will lead to you making VPOP3 into an open relay. Instead you will need to [[Allowing Mail Relay Through vPOP3|set the SMTP service access restrictions]] to limit access to your users alone.
-If you do not have a permanent connection to the Internet, then the user will need to dial directly into the VPOP3 computer or another computer on the network. This only works reliably if the dial-inserver is running Windows NT, Windows 2000 or later versions.
+=====Email client settings=====
+For the user to access their mail, they connect to the Internet, and use your external Internet IP address assigned by your ISP.
-===Dial-in server using Windows NT (Workstation or Server)===
+If your office has a static IP address on the Internet, then you can simply use that address as the server address in your email client. If you have your own domain, you can make it easier to remember by configuring a DNS name to refer to that IP address.
-You need to install the ''Remote Access Server'' network service and configure this to allow incoming TCP/IP connections.
+See also: [[determining_vpop3_server_address|Determining your VPOP3 server address]].
-If the Remote Access Server is running on the VPOP3 computer itself, then you only need to allow inward access to the VPOP3 computer itself, otherwise you will need to allow inward access to the whole network.
+If you have a static IP address and want computers to be able to work from both inside and outside your network, you MAY be able to use the external IP address in both cases if your router supports [[http://en.wikipedia.org/wiki/Network_address_translation#NAT_loopback|NAT loopback]], or you may need to [[DNS servers for internal & external access|set up two DNS servers]] (or a single DNS server with "zones").
-===Dial-in server using Windows 2000 (Professional, Server, Advanced Server) or later===
+If your office has a dynamic IP address, then you need to use a '[[http://www.pscs.co.uk/products/misc/dns.php#dyndns|dynamic DNS]]' service to give your IP address a name which you can use in your email client.
-You need to install the dial-in server portion of Windows 2000. Do this by going to ''Settings - Network and Dial-up connections - Make New Connection''. Then choose ''Accept Incoming Connections'' and set it up appropriately.
+If you have any problems with DNS entries (either static or dynamic) then we can help you set them up, but as it is not a VPOP3 problem it will be a [[http://www.pscs.co.uk/helpdesk/index.php#SUP|chargeable incident]].
-If the ''Remote Access Server'' is running on the VPOP3 computer itself, then you only need to allow inward access to the VPOP3 computer itself, otherwise you need to allow access to the whole network. You set this on the ''Networking'' tab in the ''Internet Protocol Properties''.
+{{tag>security remote, services mailboxes}}

PSCS Wiki

User Tools

Site Tools

Differences

Page Tools