Firewall Configuration - Revision history

Ltalaschus at 08:51, 21 February 2024

2024-02-21T08:51:38Z

Ltalaschus at 08:51, 21 February 2024

2024-02-21T08:51:11Z

Ltalaschus at 12:14, 22 September 2023

2023-09-22T12:14:55Z

Ltalaschus at 12:13, 22 September 2023

2023-09-22T12:13:25Z

Kzumbusch at 13:08, 21 September 2023

2023-09-21T13:08:40Z

Ltalaschus at 15:15, 19 September 2023

2023-09-19T15:15:29Z

Ltalaschus: Created page with "NOTOC It is highly recommended to protect the MailStore Server service with appropriate firewall rules. This document should help with setting up the required rules. '''I..."

2023-09-19T14:33:58Z

Created page with "__NOTOC__ It is highly recommended to protect the MailStore Server service with appropriate firewall rules. This document should help with setting up the required rules. '''I..."

New page

__NOTOC__
It is highly recommended to protect the MailStore Server service with appropriate firewall rules. This document should help with setting up the required rules.

'''Important Notices:'''
* The communication channels described below MUST NOT be intercepted by any kind of email or web proxies that are provided as part of antivirus software or unified threat management gateways.
* The Windows Advanced Firewall is activated on any Windows Server installation by default. In order to connect to services (e.g. MailStore Web Access) of the MailStore Server, it is required that the appropriate firewall rules are added (see below). Some rules are automatically created during the installation.

The table below lists all TCP ports that can be utilized by MailStore Server. Not all ports need to be opened in the firewall in every scenario. These are the default ports which may have been altered. The following abbreviations are used in the source and target columns of that table:

* ANY = Any computer from private or public networks
* ADM = Computer or network used for administration
* SERVER = Server that hosts MailStore Server

{| class="wikitable sortable"
! width="80px" | Port
! width="80px" | Source
! width="80px" | Target
! class="unsortable"| Description
|-
| align="center" | 80
| align="center" | Lets' Encrypt
| align="center" | SERVER
| Access to the MailStore Server service by Let's Encrypt web services to perform domain validation checks.
|-
| align="center" | 80
| align="center" | ANY
| align="center" | Certificate Authority
| Access to certificate authorities to check certificate revocation status via HTTP.
|-
| align="center" | 110
| align="center" | SERVER
| align="center" | ANY
| Access to email servers for archiving via POP3 (Unencrypted/STARTTLS).
|-
| align="center" | 143
| align="center" | SERVER
| align="center" | ANY
| Access to email servers for archiving via IMAP (Unencrypted/STARTTLS).
|-
| align="center" | 143
| align="center" | ANY
| align="center" | SERVER
| IMAP access to archives secured by TLS (STARTTLS) encryption.
|-
| align="center" | 389
| align="center" | SERVER
| align="center" | ANY
| Access to LDAP servers (including Microsoft Active Directory) using an unencrypted or STARTTLS-encrypted session.
|-
| align="center" | 443
| align="center" | SERVER
| align="center" | ANY
| Access to Microsoft Exchange servers for archiving via Exchange Web Services (EWS) secured by TLS encryption.
|-
| align="center" | 443
| align="center" | SERVER
| align="center" | ANY
| Access to IceWarp Mail Servers for synchronizing and authenticating users via API secured by TLS encryption.
|-
| align="center" | 443
| align="center" | SERVER
| align="center" | my.mailstore.com
| Software activation during installation.
|-
| align="center" | 636
| align="center" | SERVER
| align="center" | ANY
| Access to LDAP servers (including Microsoft Active Directory) using a TSL encrypted connection.
|-
| align="center" | 993
| align="center" | SERVER
| align="center" | ANY
| Access to email servers for archiving via IMAP (TSL).
|-
| align="center" | 993
| align="center" | ANY
| align="center" | SERVER
| IMAP access to archives secured by TLS (SSL) encryption.
|-
| align="center" | 995
| align="center" | SERVER
| align="center" | ANY
| Access to email servers for archiving via POP3 (TLS).
|-
| align="center" | 1433
| align="center" | SERVER
| align="center" | MS SQL Server
| Access to MS SQL servers by MailStore for archive store access.
|-
| align="center" | 4040
| align="center" | SERVER
| align="center" | ANY
| Access to Kerio Connect Servers for synchronizing users via API secured by TLS encryption.
|-
| align="center" | 5432
| align="center" | SERVER
| align="center" | PostgreSQL Server
| Access to PostgreSQL servers by MailStore for archive store access.
|-
| align="center" | 8460
| align="center" | ANY
| align="center" | SERVER
| Access used by MailStore Client.
|-
| align="center" | 8462
| align="center" | ANY
| align="center" | SERVER
| Access by Outlook Add-in and Web Access.
|-
| align="center" | 8463
| align="center" | ADM
| align="center" | SERVER
| Access to the MailStore Management API.
|}

[[de:Firewall-Konfiguration]]
[[en:Firewall Configuration]]

@@ Line 1: / Line 1: @@
 __NOTOC__
 It is highly recommended to protect the MailStore Server service with appropriate firewall rules. This document should help with setting up the required rules.
 '''Important Notices:'''

@@ Line 66: / Line 66: @@
 | align="center" | SERVER
 | align="center" | ANY
-| Access to an email server to send status reports and informational emails.
+| Access to an email server to send status reports and product update emails.
 |-
 | align="center" | 636

@@ Line 62: / Line 62: @@
 | align="center" | my.mailstore.com
 | Software activation during installation.<br/><span class="mswarning">'''Important:''' DNS hostname MUST be used in firewall rules due to periodically changing IP addresses of my.mailstore.com.</span>
 |-
 | align="center" | 636

@@ Line 66: / Line 66: @@
 | align="center" | SERVER
 | align="center" | ANY
-| Access to LDAP servers (including Microsoft Active Directory) using a TSL encrypted connection.
+| Access to LDAP servers (including Microsoft Active Directory) using a TLS encrypted connection.
 |-
 | align="center" | 993
 | align="center" | SERVER
 | align="center" | ANY
-| Access to email servers for archiving via IMAP (TSL).
+| Access to email servers for archiving via IMAP (TLS).
 |-
 | align="center" | 993
 | align="center" | ANY
 | align="center" | SERVER
-| IMAP access to archives secured by TLS (SSL) encryption.
+| IMAP access to archives secured by TLS encryption.
 |-
 | align="center" | 995

Firewall Configuration - Revision history

Ltalaschus at 08:51, 21 February 2024

Ltalaschus at 08:51, 21 February 2024

Ltalaschus at 12:14, 22 September 2023

Ltalaschus at 12:13, 22 September 2023

Kzumbusch at 13:08, 21 September 2023

Ltalaschus at 15:15, 19 September 2023

Ltalaschus: Created page with "__NOTOC__ It is highly recommended to protect the MailStore Server service with appropriate firewall rules. This document should help with setting up the required rules. '''I..."

Ltalaschus: Created page with "NOTOC It is highly recommended to protect the MailStore Server service with appropriate firewall rules. This document should help with setting up the required rules. '''I..."