Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Vadim Mc on January 14, 2007, 01:13:17 AM
-
Dear Collegues!
I am sorry, my English very bed.....
I have Mozilla TB 1.5.0.9 and Avast 4.7 Home Edition
I have two accounts - Gmail and standart mail account with POP3 (port 110) and SMTP (port 25)
I installed and configured Stunnel. This configuration works OK.
my stunnel.conf
client = yes
Service-level configuration
[gmail-pop3s]
accept = 12110
connect = pop.gmail.com:995
[gmail-smpt]
accept = 12025
connect = smtp.gmail.com:587
my TB Setting
1.Standard account POP3 and SMTP - worked correct
2. Gmail account
a) POP - servername - localhost, port -12110, login loginname@gmail.com
b) SMTP - servername - localhost, port -12025, login loginname@gmail.com
When I turned off avast the mail accounts worked correct - they either send and recieved mail - everything ti's OK
After setup Stunnel and Mozzila TB i wrote in avast4.ini next lines
[MailScanner]
Log=20
SmtpListen=127.0.0.1:12025
PopListen=127.0.0.1:12110
PopRedirectPort=110,12110
SmtpRedirectPort=25,12025
ImapRedirectPort=143
NntpRedirectPort=119
IgnoreAddress=
IgnoreLocalhost=0
AutoRedirect=1
StartPop=0
StartSmtp=1
StartImap=0
StartNntp=1
ShowTrayIcon=1
When I turn on Avast, I can sent and recieved mail from my standart account (POP3:110 and SMTP:25), which Avast scaned - incoming and outcoinmg mail, its OK
When I wrote mail and I sent from Gmail account - it's OK, avast scaned this outcomig mail - it's OK.
But when I want incoming mail on Gmail account I see next TB message - POP server internal error and stunnel log write:
2007.01.14 03:04:06 LOG5[3536:2344]: gmail-pop3s accepted connection from 127.0.0.1:1401
2007.01.14 03:04:06 LOG5[3536:2344]: gmail-pop3s connected remote server from 10.126.1.2:1402
2007.01.14 03:04:07 LOG5[3536:2344]: Connection closed: 66 bytes sent to SSL, 216 bytes sent to socket
Pese, advise me to solve this problem....
Best Regards, Vadim Mc
-
I'm not sure but I think you need to add in avast4.ini ports 1401 and 1402.
Also I don't think that avast! is the reason of this problem. Do you have a firewall?
-
I'm not sure but I think you need to add in avast4.ini ports 1401 and 1402.
Also I don't think that avast! is the reason of this problem. Do you have a firewall?
This ports aren't constant values, see more big stunnel log
2007.01.14 02:36:25 LOG5[3536:1840]: gmail-pop3s accepted connection from 127.0.0.1:1351
2007.01.14 02:36:25 LOG5[3536:1840]: gmail-pop3s connected remote server from 10.126.1.2:1352
2007.01.14 02:36:31 LOG5[3536:1840]: Connection closed: 72 bytes sent to SSL, 252 bytes sent to socket
2007.01.14 02:41:26 LOG5[3536:2276]: gmail-pop3s accepted connection from 127.0.0.1:1360
2007.01.14 02:41:26 LOG5[3536:2276]: gmail-pop3s connected remote server from 10.126.1.2:1361
2007.01.14 02:41:27 LOG5[3536:2276]: Connection closed: 66 bytes sent to SSL, 217 bytes sent to socket
2007.01.14 02:46:26 LOG5[3536:2384]: gmail-pop3s accepted connection from 127.0.0.1:1370
2007.01.14 02:46:26 LOG5[3536:2384]: gmail-pop3s connected remote server from 10.126.1.2:1371
2007.01.14 02:46:27 LOG5[3536:2384]: Connection closed: 66 bytes sent to SSL, 216 bytes sent to socket
2007.01.14 02:51:26 LOG5[3536:2544]: gmail-pop3s accepted connection from 127.0.0.1:1392
2007.01.14 02:51:26 LOG5[3536:2544]: gmail-pop3s connected remote server from 10.126.1.2:1393
2007.01.14 02:51:27 LOG5[3536:2544]: Connection closed: 66 bytes sent to SSL, 217 bytes sent to socket
2007.01.14 02:56:26 LOG5[3536:304]: gmail-pop3s accepted connection from 127.0.0.1:1394
2007.01.14 02:56:26 LOG5[3536:304]: gmail-pop3s connected remote server from 10.126.1.2:1395
2007.01.14 02:56:27 LOG5[3536:304]: Connection closed: 66 bytes sent to SSL, 217 bytes sent to socket
2007.01.14 03:01:26 LOG5[3536:3008]: gmail-pop3s accepted connection from 127.0.0.1:1399
2007.01.14 03:01:26 LOG5[3536:3008]: gmail-pop3s connected remote server from 10.126.1.2:1400
2007.01.14 03:01:27 LOG5[3536:3008]: Connection closed: 66 bytes sent to SSL, 217 bytes sent to socket
2007.01.14 03:04:06 LOG5[3536:2344]: gmail-pop3s accepted connection from 127.0.0.1:1401
2007.01.14 03:04:06 LOG5[3536:2344]: gmail-pop3s connected remote server from 10.126.1.2:1402
2007.01.14 03:04:07 LOG5[3536:2344]: Connection closed: 66 bytes sent to SSL, 216 bytes sent to socket
-
Who have any ideas about solve this problems?
-
I am sorry I cannot help with the setup for STunnel but I'm sure some others here will soon.
I find it much easier to use the Webmail extensions of Thunderbird for GMail. The code only runs when Thunderbird is in use and it requires just one check in the user interface of avast to get the mail scanned.
-
This ports aren't constant values, see more big stunnel log
These ports are used by Stunnel but they aren't shown in any other configuration.
I think problem is on security used by TB to communicate.
You should NOT use secure communication option into TB settings.
-
This ports aren't constant values, see more big stunnel log
These ports are used by Stunnel but they aren't shown in any other configuration.
I think problem is on security used by TB to communicate.
You should NOT use secure communication option into TB settings.
What does this mean?
Ether mail account use POP3 - first uses standart 110 port, Gmail - 12110 port.....
There is standrt acount incoming and outcoming mail scans Avast, everyting OK...
Gmail account does'n recive mail (sorry, I made mistake when I wrote - when Avast TurnOn) but sends outcoming message, which Avast scan....
Wnen I turn off Avast - Gmail accounts work OK and sent and recieve message....
-
I think problem is on security used by TB to communicate.
You should NOT use secure communication option into TB settings.
Please, go TB, Tools > Accounts (configuration) > Server folder of settings and post a screenshot here.
To know how to post a screenshot, see http://forum.avast.com/index.php?topic=8982.0
You can use WinSnap to get a screenshot (http://www.ntwind.com/software/winsnap.html).
POP3 uses 110, ok.
GMail with Stunnel will use, in your settings, 12110, ok.
The other ports listed there seems to be 'internal' communication between Stunnel and Thunderbird, and NOT external ports (from Stunnel to Internet).
-
I think problem is on security used by TB to communicate.
You should NOT use secure communication option into TB settings.
Please, go TB, Tools > Accounts (configuration) > Server folder of settings and post a screenshot here.
To know how to post a screenshot, see http://forum.avast.com/index.php?topic=8982.0
You can use WinSnap to get a screenshot (http://www.ntwind.com/software/winsnap.html).
POP3 uses 110, ok.
GMail with Stunnel will use, in your settings, 12110, ok.
The other ports listed there seems to be 'internal' communication between Stunnel and Thunderbird, and NOT external ports (from Stunnel to Internet).
I have a Russian localization TB, see this picture
-
My PC placed in local homenetwork....
All users use local smtp server - that don't spam from lolcal machine
I use fo Gmail account our intrenal smtp mail server with 25 port
The mail oiutcoming from Gmai account ok and checking Avast....
The major problem - scan incoming mail...
See second picture
-
Vadim Mc, а почему бы не попробовать пообщаться на русскоязычном форуме http://avast.ru/forum/ ? :)
(Vadim Mc, why we can't discuss this subject on Russion language in the forum http://avast.ru/forum/ ? :) )
-
Привет, земляк...
Потому что я там не нашел обсуждения этих тем - искал по POP and Gmail....
Да и наши земаны как то все агрессивно настроены к друг другу, а мне вообще то дельный совет нужен а не флейм и флудерство, прочитал ветку почему Аваст бесплатен - как то расхотелось задавать вопросы на русском форума:)
В принципе, когда не сканер Аваст не включен на сканирование входящей почты работает и стандартный ПОП и Gmail.... Стоит только включить сканер входящей почты - даже по одному 110 порту (не добавляя в редирект 12110) - стандартный ПОП работает, а Gmail начинает выдавать такую надпись
Вроде бы я по английски нормально все объясняю... Проблема именно с входящей почтой Gmail по порту 12110
-
Vadim, I can't understand a word in Russian :'(
But comparing with the same positions in my TB windows, your configurations seems ok.
Are you sure Stunnel is running at that time, are you sure you've allowed Stunnel and avast mail provider to connect the Internet into your firewall settings?
-
Sorry, I translate my pictures to English
-
Sorry, I translate my pictures to English
As I've stated before, I can compare the windows... no need to translate.
Maybe you can add the following line to the [MailScanner] section of <avast>\data\avast4.ini:
Log=20
Then generate some traffic, simulate the problem (i.e. force the avast mail scanner to time out by sending an email with attachment) and then post here the contents of the file <avast>\data\log\aswMaiSv.log
-
Tech, the words on picture says:
Warning
Command USER is not executed. Postal server localhost has answered: No POP server defined. Use real server address instead off 127.0.0.1 in your account.
Tech, you overtaked my post :)
Vadim Mc says that he has a problem exactly with incoming mail Gmail on port 12110.
Vadim Mc, пожалуйста, дублируй свои сообщения переводом на английский, как, например, я этот свой пост :)
(Vadim Mc, plz, translate your posts on Egnlish like this one mine :) )
-
Vadim Mc, а почему бы не попробовать пообщаться на русскоязычном форуме http://avast.ru/forum/ ? :)
(Vadim Mc, why we can't discuss this subject on Russion language in the forum http://avast.ru/forum/ ? :) )
=======================================================
I solved this problem. I think that's interes for other users...
Can I write Russian that you translate my message to English?
-
Vadim Mc, я постараюсь ;)
(Vadim Mc, I'll try ;) )
-
Vadim Mc, я постараюсь ;)
(Vadim Mc, I'll try ;) )
Сергей, вкратце ситуация такая...
У нас локалка на статическом IP - т.е не DHCP.... В настройках руками пишется шлюз (gateway), адреса серверов DNS, и собственно сам адрес машины у меня он 10.126.1.2... Натолкнуло меня на эту мысль упорное сообщение почтовика что адрес 127.0.0.1 не является сервером
Я полез в stunnel.conf, прописал там ручками
[gmail-pop3s]
accept = 10.126.1.2:12110#Mой статический IP адрес
connect = pop.gmail.com:995
delay = yes
Потом прописал в ТБ
servername - 10.126.1.2#Мой статический IP
username - nickname@gmail.com
Port - 12110
Использовать защищенное соединения - никогда
И все заработало, порты 110 (стандартный почтовый аккаунт) и 12110 (Gmail) отлично редиректятся и сканируются......Поискал в AvastIni параметр DHCP - ничего не нашел.....
Так что вот такая вот загогулина, в случае статического IP адреса надо его а не localhost прописывать в TB и stunnel....Завтра проверю у друга работу с DCHP :)
-
OK, see the translation of your last post has maded by myself :)
"Sergey, in brief the situation is...
We have local-area network on steady-state IP - i.e not DHCP.... In setting I wrote the floodgate (gateway), the addresses of DNS servers and the address of the my machine, beside me it's 10.126.1.2... The stubborn that message mail contractor that address 127.0.0.1 is not a server was promted me on such thought.
I edited the stunnel.conf and has prescribed there:
[gmail-pop3s]
accept = 10.126.1.2:12110#My static IP adress
connect = pop.gmail.com:995
delay = yes
Then I prescribed in TB:
servername - 10.126.1.2#My static IP adress
username - nickname@gmail.com
Port - 12110
Use protected join - never
After this all have worked, ports 110 (standard postal account) and 12110 (Gmail) have been redirected fine and scanned with avast!...... I has searched in avast.ini parameter DHCP and found nothing.....
So here is the solution, in the event of steady-state IP address it is necessary to prescribe it not in localhost but in TB and stunnel.... Tomorrow I'll examine how does DCHP work with such settings beside my friend :) "
Tech, thx again for your interesting and for your desire to help :D
-
accept = 10.126.1.2:12110#My static IP adress
I think it should be:
accept = 127.0.0.1:12110
servername - 10.126.1.2
I think it should be:
servername - 127.0.0.1
As far I can understand...
-
Dear Collegue! I find some think nuance with statical and dinamycal IP adress and stunnel and TB...
Dear SergFon - I wrote little article (Russian) in this link - http://forum.sukhoi.ru/showthread.php?t=45299 - please, if this information is interest to Avast, please translate it and add it in Faq or other themes about avast and ssl....I didn't find information about difference setup IP and DHCP adress to Stunnel and TB on our forum...... Thank everybody very match!
Who is avast resseler in Saint-Peitrsburg, Russia? Give me contact infoirmation....I want suggest our CEO about futured our corprate antivirus system :)
-
I wish Alan could give us some light here...
It's a pity that we can't alert him by IM anymore :'(
-
Tech,
I am not sure which Alan you mean.
However, this Alan is very puzzled at the introduction of DHCP vs static IP into this issue.
I will admit, again, that I have never used STunnel but this is just the plain old proxy issue with STunnel being the proxy. I am very familiar with testing Thunderbird and various proxy chains with avast involved and I have reported on a number of them in this forum. I find it hard to imagine how IP addresses are involved.
Thunderbird works in no way different from any other mail client (they all have to work the same way since they are all implementing the old as dirt POP and SMTP protocols).
My last Russian lessons were almost 40 years ago and I last tested my Russian speaking ability in St. Petersburg (it had a different name at the time) 30 years ago. So, I doubt that I will have much success in reading the discussion that has been mentioned.
-
Dear Moderators, U suggest final resume In FAQ this questions....
For correct work and scanning email with SSL connection on depend type of TCP address getting for local IP avast must has nest setting...
If yours host get DHCP address from DHCP server the setting of ThunderBird and stunnel if you have SSL mail connection have standard parametrs descripioned in official FAQ
Stunnel
[gmail-pop3s]
accept = localhost:12110
connect = pop.gmail.com:995
delay = yes
TB
servername - localhost
username - nickname@gmail.com
Port - 12110
after this setting we added to redirecting ports port 12100 and avast normally scanning incoming email
Important....
If you have statical IP adress, no DHCP you must write next setting to stunnel and TB - you replace localhost to yours staticla IP address
stunnel
[gmail-pop3s]
accept = 10.126.1.2:12110
connect = pop.gmail.com:995
delay = yes
TB
servername - 10.126.12
username - nickname@gmail.com
Port - 12110
after this setting we added to redirecting ports port 12100 and avast normally scanning incoming email for statical IP..... In another setting yours TB willn't correct when you turn avast.... I spent some hours, and solve this problem
-
So, I doubt that I will have much success in reading the discussion that has been mentioned.
I didn't understand mean this sentense....
In my case, when I have local statical IP adress I have problem with redirect ports from SSL to standart POP ports and TB and avast cooperative working.....
In other place, where is DHCP IP addresing order - TB + Stunnel + avast work very nice with setting from FAQ....You understand difference statical and dynamical IP?
-
Dear adminstarion!
Please don't get newbie the bad pictures and text in profile - I am not lamer...
OK?
-
Click the Profile button at the top of every page, there you can change your 'Forum Profile Information' there, Personal Text: change to I'm a llama (It isn't lamer) there are no pictures in a Newbies Profile unless you add one, see image.
-
Dear adminstarion!
Please don't get newbie the bad pictures and text in profile - I am not lamer...
OK?
It stands llama - not lamer :)
llama -> http://www.ansi.okstate.edu/breeds/other/llama/llama1.jpg
But as DavidR told you, you can change the text to whatever you want :)
-
Dear SergFon - I wrote little article (Russian) in this link - http://forum.sukhoi.ru/showthread.php?t=45299 - please, if this information is interest to Avast, please translate it and add it in Faq or other themes about avast and ssl....
Vadim Mc, извини, слишком много текста для перевода, я просто не располагаю таким количеством свободного времени. :-\
(Vadim Mc, I'm sorry. The article is too big and I don't have much time to tramslate it :-\).