Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: 2meme2 on February 01, 2010, 07:01:04 PM
-
Hello,
I thought that the new avast (ver 5), is able to scan ssl traffic right?
If yes, then could somebody please state how to do it? ???
(...think I'm lost in there at thunderbird 3.0.1 :'()
note to mods: Of-course ignore/delete this post if it's wrong assumption, that ver 5. scans ssl, thanks.
-
By all accounts it does, there are always exceptions related to a users settings in the email client, errors, etc. etc. We know none of that.
Does the avast help file or the quick start guide not have any information http://www.avast.com/documentation/quick-start-guide-free-en-ww.pdf.
-
You have to turn off encryption in the email client and set the ports differently.
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458 (http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458)
Has the details. Avast will take care of the encryption so the email client has to have it disabled for Avast to access the connection.
-
By all accounts it does, there are always exceptions related to a users settings in the email client, errors, etc. etc. We know none of that.
Does the avast help file or the quick start guide not have any information http://www.avast.com/documentation/quick-start-guide-free-en-ww.pdf.
I'm afraid there is not much info in the help-file regarding ssl, and quick start guide tells nothing about mail shield setup. :(
You have to turn off encryption in the email client and set the ports differently.
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458 (http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458)
Has the details. Avast will take care of the encryption so the email client has to have it disabled for Avast to access the connection.
Thanks gideond, appreciate it.
But, unfortunately, it seems not working for me. :'(
If I change port settings in mail config ( I have tried both TB3 and OE), it just stop working .... :'( :'(
btw, I found following entries in the mail shield log, don't know if relevant ...
02-Feb-2010 11:00:02 AM 00000D00: Cannot connect to POP server 74.125.127.109 (74.125.127.109:110), connect error 10060
02-Feb-2010 11:00:02 AM 00000D00: Cannot establish SSL, SSL_connect error 5
Presumably 74.125.127.109 points to google ....
-
Hi Playwin2,
Yes that IP is google.
I have just tried POP in TB3, and I can get the emails scanned by avast, set the settings to the same as in the images.
avast! should automatically detect the gmail account and set up the SSL for it, but if it doesn't, it should look like the last image.
-Scott-
EDIT: Messed up the images... ::)
-
Thank you scott, yes I exactly tried those settings as shown by your screen-shots, but it still not working, maybe something wrong in my system :'(
don't know ..... :( :'( :'( :'(
-
Are you using POP3 or IMAP? If you are using IMAP the Incoming port should be 143 with encryption disabled. I've tested it thoroughly on TB3 with Gmail and no issues here.
-
Are you using POP3 or IMAP?...
POP
-
Please check if your firewall is not blocking the connection. The avast service (AvastSvc.exe) must be allowed to connect to your mail servers.
-
just a tip: don't put your entire address name in the "authentication" box (no secure authentication, leave this unchecked), just your Google username, ie not peter@gmail.com, but just peter. And use 587 rather than 25 in Thunderbird SMTP (sending), and as said ssl disabled. Then check in avast mail scanner expert settings, ssl account tabs, that your account has been correctly detected, you should have two lines, one for POP redirecting to 995, ssl on, and the other one for SMTP to 587, TLS on (or 465/SSL).
-
Are you using POP3 or IMAP?...
POP
More general hint.
Consider using Gmail/IMAP/Thunderbird. POP is just so "last century". ;D
-
Are you using POP3 or IMAP?...
POP
More general hint.
Consider using Gmail/IMAP/Thunderbird. POP is just so "last century". ;D
+1 :D
-
@vojtech: thanks for responding, yes, AvastSvc.exe allowed in the firewall, see I use ZA free, which doesn't allow fine tunning as other firewall allows, but I tried all the combinations: (allow allow allow allow/ allow allow ask ask/ ask ask ask ask etc.) presently it set as allow allow block block.
@Logos: thank for the TLS tip.... didn't knew that , yep tried without the domain name.
@Vladimyr: most of the time I use the web-interface, pop is just for quick checking.... hmmm.....IMAP.....not a bad idea.....let's see
to all:
well I un-installed and re-installed(this time I downloaded from alwil server) avast 5 to see if that improve anything, nope same story. (btw this time I installed only 5 shields and it seems pretty light on system.... yes lighter than before.)
ps: I guess you guys don't have those awful entries in the mail shield log, right?
(really beats me , why on earth mail shield choose innocent creature like playwin2, to show it's ....umm... tricks.... ::))
thanks...
-
could you post here screen shots of your configuration (hiding anything that could compromise privacy),
ie Thunderbird account settings, the server tab for your account + smtp configuration...
ie Avast mail scanner expert settings ssl account tab
Avast general settings troubleshooting tab >>> redirect settings part...
-
okay here are some screen shots:
server settings in tb:
(http://i47.tinypic.com/335d0kg.png)
(http://i47.tinypic.com/2lvh8it.png)
settings in avast
(http://i45.tinypic.com/sc81gh.png)
(http://i49.tinypic.com/dmsp6f.png)
error I receive in tb
(http://i47.tinypic.com/nvtt0o.png)
error I receive in oe
(http://i45.tinypic.com/2eoh1g3.png)
-
Hi again,
I think your firewall is blocking avast proxy, your error message shows no ssl, as if the client (Thunderbird or OE) was attempting to connect directly. Settings on the screen shots are OK. Wanted to ask but thought obviously, you have scan inbound and outbound messages checked in Avast right ?
-
Hello logos, yes scan inbound and outbound messages box are checked.
connecting directly ? ..... hmm..... netstat -an shows proxy are running but yes it could be ZA blocking those..... tcpview....might tell.....let me see.... (that's a very interesting point though )
thnaks...
-
ZA says it's listening...
-
ZA says it's listening...
OK it's listening, which is completely normal, but what happens when there's some traffic...I don't know ZA interface (used it once or twice very shortly long ago), so what tell the logs, look for blocked connections...
-
I think then ZA display "Blocked from Listening...."
but yes, I will check the report log...
(btw in the alert/logs panel and programs, there is no entry regarding avast service atm)
-
I think then ZA display "Blocked from Listening...."
but yes, I will check the report log...
(btw in the alert/logs panel and programs, there is no entry regarding avast service atm)
and what gives if you disable ZA completely?
-
disable ZA.... well, i admit I haven't tried that ( damn! the idea didn't even occurred to me) ...
yes ... worth a try ... will try this late night today... (see I can't reboot now... in middle of something )
btw in the meantime I checked few old logs of ZA, in one of them I find following entry regarding avast...
(although I'm pretty sure it has nothing do with the present problem.... but still who knows ::))
ACCESS,2010/02/01,22:43:08 +5:30 GMT,avast! Service was blocked from accepting a connection from the Internet (<ISP here>:DNS).,N/A,N/A
-
that's what you called nothing to do with ??? that shows clearly that avast has been denied access to internet traffic, at least once...
-
But that's incoming(accept) connection blocked and also from ISP:DNS, in fact it seems pretty common with any internet facing app I use....
for example logs are full of following entries:
ACCESS,2010/02/01,17:42:30 +5:30 GMT,avast! antivirus Update was blocked from accepting a connection from the Internet (ISP:DNS).,N/A,N/A
ACCESS,2010/02/01,22:41:24 +5:30 GMT,Opera Internet Browser was blocked from accepting a connection from the Internet (ISP:DNS).,N/A,N/A
and those app's runs perfectly...
-
Avast is not a browser...
-
Hello,
tried with ZA disabled, with only XP firewall on, same result.
-
Hello,
tried with ZA disabled, with only XP firewall on, same result.
oh no ::) this was the very last thing I could think of...
-
very true Logos... seems like perfect mistry ::)
anyway by poking around service applet, it seems that the mail scanner depends on RPC and something called aswMon2, any idea where the hell I suppose to find aswMon2? ( I want to check it status, and it's not listed in Non-Plug'n'Play drivers under device manager) :(
-
Sorry for interrupt....
One of avast!5 user said he has no problem with Gmail and Thunderbird, and he said about this topic.
He said "Try to insert 995 into POP Port(s) in 'Redirect settings' and set Thunderbird's SMTP port as 25."
I hope this can help your problem.
-
Hello NON,
thank you...
sorry but your solution didn't work for me ... :(
-
Have you tried a reinstallation of Thunderbird? I just had to install 3.01 again because of some corruption in the update files somewhere along the way.
-
no but this(tb) is the fresh installation.
my older tb was v2.x, so I thought it would be better to install fresh rather upgrade.
-
Since you seem to have tried everthing else, maybe a separate download and over the top reinstall of 3.01 would help? Fixed some other TB problems for me.
-
hm...there is no harm in trying that I guess... so okay will try that too....
of-course will post the outcome here....
thank you guys...all of you...for trying to helping me out... :)
-
I'm beginning to think this has to do something with the openSSL package avast using...
anyway I give up :(
Thanks.
-
when you reinstalled Thunderbird, did you also delete your profile folder + other Thunderbird traces left behind in application data and program files? The problem is you're in POP, and if you delete your profile without saving your mails, you lose them. The thing is that your profile could be corrupted and be behind that mess. If you set Gmail not to delete mails on the server when downloading them (done from the web interface in Gmail settings), you could mark them all as unread...and download them again once you've created a new profile in POP. Or may be switch to IMAP this time ;)
OK I don't know, it's not normal that you can't get it to work with Avast...
-
when you reinstalled Thunderbird, did you also delete your profile folder + other Thunderbird traces left behind in application data and program files? The problem is you're in POP, and if you delete your profile without saving your mails, you lose them. The thing is that your profile could be corrupted and be behind that mess. If you set Gmail not to delete mails on the server when downloading them (done from the web interface in Gmail settings), you could mark them all as unread...and download them again once you've created a new profile in POP. Or may be switch to IMAP this time ;)
OK I don't know, it's not normal that you can't get it to work with Avast...
Yep. cleared them all.
as for loosing mails...naaaa...I use "ImportExportTools" extension. :D
-
would you mind uninstalling ZA completely and reboot?
-
OMG not again...
C'mon Logos, you sure knew, un-installing ZA is real PITA. :o
-
OMG not again...
C'mon Logos, you sure knew, un-installing ZA is real PITA. :o
it's up to you ;) I would do that, but don't hold me for responsible if that changes nothing... ;D
-
playwin2, don't you have an imaging program like Free Macrium Reflect? You can just make an image of your system onto a disk, play with Zone Alarm and Avast! to help chase down the issue, and then restore the image. Although I would first see if TB and Avast! work together with the Windows firewall, then try installing Zone Alarm AFTER Avast! to see if that makes a difference.
-
yeah, or just make a (windows) restore point (should be actually automatic when launching the uninstall process) before uninstalling ZA...
-
Before you remove ZA, let's check another easy setting first.
I haven't installed version 5 yet, but on my system, I have my Gmail POP set up for port 995 in TB version 3, with just my User Name, not entire @gmail.com. See first image.
And for the IMAP account, port 993, but entire email address in user name. My SMTP settings are below as well.
Hope this helps.
Marc
-
Before you remove ZA, let's check another easy setting first.
I haven't installed version 5 yet, but on my system, I have my Gmail POP set up for port 995 in TB version 3, with just my User Name, not entire @gmail.com. See first image.
And for the IMAP account, port 993, but entire email address in user name. My SMTP settings are below as well.
Hope this helps.
Marc
Hello MarcZ,
your screen-shots showing the *default* entry of SSL.
Of-course GMail will work on those settings....
BUT are you suggesting that with those settings, avast is capable of scanning your incoming and outgoing mails...!!!???? ???
I'm really confused now! ???
--
@sded: Free Macrium Reflect... now it's seems very interesting tool.. downloading... thanks :)
--
As for removing ZA, I'm not certain now... but anyway I have a plan to install linux next month, so I have to format my system anyway.... will see then...thanks.
-
Before you remove ZA, let's check another easy setting first.
I haven't installed version 5 yet, but on my system, I have my Gmail POP set up for port 995 in TB version 3, with just my User Name, not entire @gmail.com. See first image.
And for the IMAP account, port 993, but entire email address in user name. My SMTP settings are below as well.
Hope this helps.
Marc
we've been through all these things already ;) (read my previous posts in this thread) ... and your settings are OK if you don't want Avast mail scanner to scan anything ;D
-
Yes, my bad, :-[ sorry.
No, Avast is not scanning my gmail mail.
-
Yes, my bad, :-[ sorry.
No, Avast is not scanning my gmail mail.
then change your settings to what I suggested (again, read this thread from the beginning ;) )
-
@Logos
It seems Marc still using ver.4.x... (I missed that part)
...I haven't installed version 5 yet, ...
and no need to sorry, Marc, you are trying to help me... I appreciate that.... thanks. :)
-
oh OK I didn't see it. Scanning Gmail is still possible with V4, but that's more complicated. I've done it a long time but I see no need to describe the how to here as I seriously think people should switch now to V5.