Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Antigen on July 07, 2005, 08:04:42 PM
-
I'm using Gmail as email address, but it use the SSL protocol to comunicata and Avast is not compatibile. Is possible to eliminate the provider that check the email? In this case is unusued and it only "eat" my memory :D
Bye
-
Just disable the provider(s) you don't need/want in the on-access control panel.
-
To set up SSL gmail with avast!, using Stunnel and openSSL, you need to do 3 things:
1) In your email client, use
localhost:11111 for your pop server
localhost:11026 for your smtp server
Do not check "use secure"
2) In avast! email provider add
11111 to the pop3 ports to redirect
11026 to the smtp ports to redirect
3) With a text editor, create Stunnel.conf (or cut/paste below)
Stunnel.conf, the configuration file, looks exactly like this for gmail:
client=yes
# POP3 service, listens on localhost:11111
[gmail-pop3s]
accept=localhost:11111
connect=pop.gmail.com:995
# SMTP service, listens on localhost:11026
[gmail-smtps]
protocol=smtp
accept=localhost:11026
connect=smtp.gmail.com:587
You need to download and install OpenSSL from http://www.openssl.org/related/binaries.html and Stunnel from http://www.stunnel.org/download/binaries.html and install them. Stunnel can either be installed as a windows service or added to your startup group. Put stunnel.conf in the same folder as stunnel.
There are a large number of users of secure email with avast! who can help here in the forum if you have problems/questions. Give it a try!
-
I'm using GMX and so i want to know if OpenSSL and Stunnel are right for this.
I changed in the "Stunnel.conf" file gmail to the correct GMX server but there is no session active in Stunnel.
What should i do?
server007
-
What should i do?
Did you follow sded's instructions?
Anyway, take a look here: http://forum.avast.com/index.php?topic=10428.0 to see how to set up secure email with avast!.
-
sded, I need to setup avast with a Att Yahoo SSL connection. I see your instruction here for Gmail. The server settings are obvious but what about the area with [gmail-pop3s] and [gmail-smtps]. Can I just use [AttYahoo-pop3s] and [AttYahoo-smtps]? Here are the instructions from Att.
1.Open your email client program.
2.Locate the email account settings for your particular client.
3.Change the POP server to pop.att.yahoo.com.
4.Change the SMTP server to smtp.att.yahoo.com.
5.Check the option labeled Use an encrypted connection (SSL) and change the SMTP port to 465.
6.Check the option labeled Use an encrypted connection (SSL) and change the POP3 port to 995.
7.Confirm the above settings then click OK.
-
Can I just use [AttYahoo-pop3s] and [AttYahoo-smtps]?
I think so, but I'm not sure.
The other configurations I can't test. My stunnel configuration is:
cert = stunnel.pem
# GMail
client=yes
# POP3 service, listens on localhost:11110
[gmail-pop3s]
accept=127.0.0.1:11110
connect=pop.gmail.com:995
# SMTP service, listens on localhost:11025
[gmail-smtps]
protocol=smtp
accept=127.0.0.1:11025
connect=smtp.gmail.com:587
-
sded, I need to setup avast with a Att Yahoo SSL connection. I see your instruction here for Gmail. The server settings are obvious but what about the area with [gmail-pop3s] and [gmail-smtps]. Can I just use [AttYahoo-pop3s] and [AttYahoo-smtps]? Here are the instructions from Att.
Should work, per their instructions. If there is an smtp problem, you may also need to comment out the "protocol=smtp" with a ;--ISPs are sometimes a little loose with TLS vs SSL. The stuff in the brackets is just the name stunnel uses to identify the section of commands and can be anything.
-
Sounds good, thanks form the info, haven't had much of a chance to mess with it yet.
Busy, busy, busy, Thanks again!!
-
Have it setup but am getting a error in Outlook Express.
The host 'localhost:11111' could not be found. Please verify that you have entered the server name correctly. Account: 'SBC Yahoo', Server: 'localhost:11111', Protocol: POP3, Port: 995, Secure(SSL): Yes, Socket Error: 11001, Error Number: 0x800CCC0D
Here is the stunnel.conf file
client=yes
# POP3 service, listens on localhost:11111
[att-yahoo-pop3s]
accept=localhost:11111
connect=pop.att.yahoo.com:995
# SMTP service, listens on localhost:11026
[att-yahoo-smtps]
protocol=smtp
accept=localhost:11026
connect=smtp.att.yahoo.com:465
Please Help!! Thanks!
-
Based on Tech's settings he is using localhost:11110 and you are using localhost:11111, I have no idea if that is critical or you can choose the localhost port.
Also were Tech uses accept=127.0.0.1:11110 you are just putting in accept=localhost:11111 perhaps you could try the 127.0.0.1:11110
-
Thanks for the reply DavidR. I tried settings like Tech's but no luck. I also tried 127.0.0.1 instead of localhost in Outlook Express but still no luck. Any other suggestions? Thanks!!
-
Norm321,
did you first ensure that you knew how to make the secure connection work between Yahoo and Outlook Express before you tried to insert STunnel in the mix?
You are begging for trouble if you do not.
-
Hey alanrf, yes I have it working right now and had it working before I changed some settings to accomidate Stunnel. I will tinker with it some more. I tried a number of ways so far but have a few more ideas. I have plenty of sticktoittivness and won't give up until I get it. I like how in avast you can add the extra ports to redirect by placing a comma between them. This is great because I have multiple email
accounts.
Thanks!!
-
Got it working. Here is the stunnel.conf file and the Outlook Express settings for anyone that needs to get setup for avast to scan ATT Yahoo SSL mail.
#attyahoo
client=yes
# POP3 service, listens on localhost:11110
[att-yahoo-pop3s]
accept=127.0.0.1:11110
connect=pop.att.yahoo.com:995
# SMTP service, listens on localhost:11025
[att-yahoo-smtps]
;protocol=smtp (removed with ; in front of this)
accept=127.0.0.1:11025
connect=smtp.att.yahoo.com:465
In Outlook Express in the Properties for your Account on the Server tab use
127.0.0.1 for both POP and SMTP servers.
Then on the Advanced tab use 11110 for the POP Port
and use 11025 for the SMTP Port. DO NOT check This Server Requires a Secure Connection(SSL).
Then remember to add the ports 11110 and 11025 into the redirect ports in the email section of avast.
-
Got it working.
Thanks for posting the solution. If anybody needs a solution for Yahoo I'll address him/her to your post 8)
-
Now I have another dilema. I tried to setup my wife's system with the same configuration as she too has Att Yahoo mail. She uses Incredimail however. Everything works as far as sending and receiving but avast is not scanning the outgoing mail. The blue avast ball spins but the mail scanning tray icon does not appear. avast is set to insert a clean note and you guessed it it does not appear in the sent email. The mail scanning tray icon appears for incoming mail and the note appears on those incoming emails. Do you think this is an avast quirk or do i possibly have to alter the stunnel config file somehow? Thanks in advance!!
-
Norm, maybe you can add the following line to the [MailScanner] section of <avast>\data\avast4.ini:
Log=20
Then generate some traffic, simulate the problem (i.e. force the avast mail scanner to time out by sending an email with attachment) and then post here the contents of the file <avast>\data\log\aswMaiSv.log
Details: http://forum.avast.com/index.php?topic=12234.msg103474#msg103474
-
I would say this is an Incredimail quirk.
Incredimail and clean notes are a nightmare even without trying to configure it for SSL email. This forum is littered with people having problems inserting clean notes into incredimail. The way incredimail multi-part mime with HTML and Text parts to the email, avast has to do two clean notes one for HTML and one for the Text parts of the email. Incredimail seems to have problems with this where the email appears malformed with a mix of text amd html.
Personally I see little value in the insertion of clean notes. I don't take any notice of them (trusting sod aren't I) and neither does avast it still scans your email, the same is true of other AVs, they just do what they should, scan the email. There are even spam and malicious email that has a fabrication of a clean note from a well known AV, just to lull people into a false sense of security.
-
I would say this is an Incredimail quirk.
Me too.
Incredimail and clean notes are a nightmare even without trying to configure it for SSL email. This forum is littered with people having problems inserting clean notes into incredimail. The way incredimail multi-part mime with HTML and Text parts to the email, avast has to do two clean notes one for HTML and one for the Text parts of the email. Incredimail seems to have problems with this where the email appears malformed with a mix of text amd html.
David got the point... if you search the board maybe you can find more.
Personally I see little value in the insertion of clean notes. I don't take any notice of them (trusting sod aren't I) and neither does avast it still scans your email, the same is true of other AVs, they just do what they should, scan the email. There are even spam and malicious email that has a fabrication of a clean note from a well known AV, just to lull people into a false sense of security.
For me, clean notes are good advertisement to avast, nothing more 8)
-
I have it in my outbound mail for that reason alone to promote avast, but then again I don't have Incredimail nor am I having any problems with it.
If I did have Incredimail and I experienced a problem with the clean note, based on my perceived value of the clean note I wouldn't spend time trying to get it working, I would just disable it.
-
If I did have Incredimail and I experienced a problem with the clean note, based on my perceived value of the clean note I wouldn't spend time trying to get it working, I would just disable it.
Can you see in the headers of the messages (Right click the message, choose Properties and Details), for instance:
X-Antivirus: avast! (VPS 0XXX-X, XX/XX/2004), Inbound message
X-Antivirus-Status: Clean
-
Read my lips ;D ;D 'I don't have Incredimail,' but if I did I wouldn't spend time trying to get the insert clean notes to work. As I believe this is a quirk of Incredimail and of limited benefit, I wouldn't spend a lot of time on it..
-
My question is the mail actually getting scanned on the way out. I'm not so concerend about the clean notes I just would like the mail scanner to check outbound mail. I just received a test mail from my wife's system and it did not contain anything in the properties about the outbound just the inbound "X-Antivirus: avast! (VPS 0XXX-X, XX/XX/2004), Inbound message
X-Antivirus-Status: Clean" that avast scanned on my system. Are you saying that if I disable the notes on the outbouind mail the mail scanner may work? I haven't tried the logging yet but maybe today sometime. Thanks!!
-
The clean notes, enabled or disabled 'don't' have any relationship with the email header information about AV scans, that should be there all the time. So disabling the insertion of clean notes only relates to the body text of the email. The insertion of clean notes when problems were a format related problem not one of the mail not being scanned.
It won't change if it is being scanned or not (but it is redundant/unnecessary so I would most certainly uncheck it, that won't hurt/effect anything), so there is something else going on.
You could enable the 'Show detailed info on performed actions' in the Internet Mail provider and that will show info as emails are being scanned and nothing if they aren't.
Logging is helpful when tracking down issues of mail that 'is' being scanned, though I don't know/doubt if it will generate any information if it isn't being scanned.
-
I did turn off the notes just to check, it had no effect. I turned on logging per Tech instructions and sent a big email that timed out(actually I got a message from Incredimail about not being able to send the message and not a timeout from avast, had avast it set to the lowest allowed time "10") Here is the log anyway to see if someone sees something in it. Thanks!!
06/29/07 19:19:58 000005D0: Started as service, Log = 1
06/29/07 19:19:58 000005D0: Build 4.7.1001
06/29/07 19:19:58 000005D0: Windows XP Workstation (Service Pack 2)
06/29/07 19:20:54 000005D0: AutoRedirect settings changed 1
06/29/07 19:20:54 000005D0: POP Start settings changed: 1
06/29/07 19:20:54 000005D0: POP Listen settings changed: 127.0.0.1 12110
06/29/07 19:20:55 000005D0: POP RedirectPort: 110
06/29/07 19:20:55 000005D0: SMTP Start settings changed: 1
06/29/07 19:20:55 000005D0: SMTP Listen settings changed: 127.0.0.1 12025
06/29/07 19:20:55 000005D0: SMTP RedirectPort: 25
06/29/07 19:20:55 000005D0: IMAP Start settings changed: 1
06/29/07 19:20:55 000005D0: IMAP Listen settings changed: 127.0.0.1 12143
06/29/07 19:20:55 000005D0: IMAP RedirectPort: 143
06/29/07 19:20:55 000005D0: NNTP Start settings changed: 1
06/29/07 19:20:55 000005D0: NNTP Listen settings changed: 127.0.0.1 12119
06/29/07 19:20:55 000005D0: NNTP RedirectPort: 119
06/29/07 19:51:33 0000051C: --POP Mail is clean
06/29/07 19:51:37 0000051C: --POP Mail is clean
06/29/07 20:35:50 000005D0: POP redirect port settings changed: 110,11110
06/29/07 20:35:50 000005D0: SMTP redirect port settings changed: 25.11025
06/29/07 20:48:03 000006D0: --POP Mail is clean
06/30/07 10:04:36 000007F0: --POP Mail is clean
06/30/07 10:04:40 000007F0: --POP Mail is clean
06/30/07 10:04:43 000007F0: --POP Mail is clean
06/30/07 10:16:36 000005D0: Log settings changed 20
-
Found the problem, it was my own stupidity. After studying the avast log I noticed that I had made a mistake and put a . intead of a , between the smtp redirected ports in avast. Sorry for all the extra replying done by all. Here is what the mistake was. Thanks to Tech for suggesting the logging feature otherwise I may have not found it. Outbound mail in Incredimail is now scanned. Thanks to everyone!!
06/29/07 20:35:50 000005D0: POP redirect port settings changed: 110,11110
06/29/07 20:35:50 000005D0: SMTP redirect port settings changed: 25.11025
^
-
Thanks to Tech for suggesting the logging feature otherwise I may have not found it.
You can disable logging now... removing the added line 8)
-
Ah that would do it no port 25.11025 to redirect .
You can try the insert clean notes if you are feeling particularly brave now ;D
-
Disabled the logging and the clean notes are active and working. I'm glad it was something simple but what a bunch of time spent, oh well, Cheers!!
-
Well worth the effort though ;D