Home » Kerio User Forums » Kerio Connect » Problem Accessing Kerio Connect from Outside LAN (Problem Accessing Kerio Connect via SMTP and IMAP)
  •  
BobH

Messages: 59
Karma: 0
Send a private message to this user
We are currently running Kerio Connect v9.2.6 patch 2 installed on Win Server 2008 R2.

About a 10 days ago, we started see a problem connecting to Kerio Connect from outside our network using secure IMAP and SMTP. We use this primarily on cell phones and tablets.

If I take a cellphone that doesn't work from the outside and I configure it to work inside the network, using local addresses, it works without issue. If you use the web interface, that works both inside and outside without issue.

This made me think that the issue was Sophos firewall related but I had a Sophos tech remote in and he confirmed that traffic was getting to the Kerio Connect server.

I've gone into the SMTP and IMAP service settings (25,465,143 and 993) and confirmed that there is no setting allowing only local addresses.

Anyone know of a reason or a setting in Kerio that would block external access?
  •  
Maerad

Messages: 210
Karma: 38
Send a private message to this user
Do a portforwarding for port 80 and 443 and see if you can access the webmailer
  •  
BobH

Messages: 59
Karma: 0
Send a private message to this user
The web interface is working fine. We use HTTPS for that exclusively. I just can't get SMTP and IMAP to go.

I have a rule setup on the Sophos firewall to forward HTTPS as well as SMTP and IMAP (secure and non-secure) to the Kerio Connect server.
  •  
kingswaygroup

Messages: 31
Karma: 4
Send a private message to this user
When I see this type of situation I check the response from the port I want to get to using telnet walking backwards from the server itself, to the LAN and finally from a WAN address. So in your case are you getting a connection to the ports you need if you telnet <ipaddress> <port> or does it hang or say connection unavailable? If you are getting there locally and on the LAN maybe it is worthwhile to disable the Windows firewall momentarily to see whether it is your culprit. Once you have taken all of those out of the equation then it seemingly comes down to Kerio and I have to rely on what I was told by them today which is stay at 9.2.5 p3 until we get back to a stable release. I sure hope that is coming real soon!

David Green
  •  
Maerad

Messages: 210
Karma: 38
Send a private message to this user
Mhh... I missed the part with the webinterface from internal and external Smile

IMHO you can rule out any windows firewall or kerio problem here. For me it seems like a problem with the sophos firewall and/or routing.

If the webinterface works flawless from external connections, you can access everything from local connections and the IP addresses are valid for connection in the IP Allowed part (you already said that), then it can only be something in between, like the router or firewall.

You could check the debug log with msgs enabled for IMAP etc. to see, if the clients can even connect to the server.

Also check the sophos firewall - maybe sometime triggered the IDS and blocked the port/connection/server/whatever.

And try to remember - did you or someone else change ANYTHING some days back before the incidents happened? Sometimes it can be just a tiny detail.
Previous Topic: 9.2.5 P3 and also 9.2.3 100% CPU and freezing completely
Next Topic: Kerio Connect and GoGet devices
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Oct 20 09:13:07 CEST 2018

Total time taken to generate the page: 0.67951 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.