Kopano Packetfilter for Submission (Port 587)

kopano
postfix

#1

For some reasons the packetfilter rules for Email related ports are not defined through the package univention-mail-postfix when using Kopano.
This leaves the Submission Port 587 opened by Postfix but blocked by the packetfilter.

It might be worth to consider the following additional UCRV to be set through kopano4ucs

ucr set security/packetfilter/package/kopano4ucs/tcp/587/all/en=SUBMIT
ucr set security/packetfilter/package/kopano4ucs/tcp/587/all=ACCEPT

#2

Hi Dirk,

yes something similar was reported via email last week as well. as I did not have the time to take a look at this yet I have now created a jira ticket. you can find it at https://jira.z-hub.io/browse/KUCS-28

What makes me wonder is the different value of security/packetfilter/package/kopano4ucs/tcp/587/all/en. you used SUBMIT, whereas the other sender suggested SMTP/submission. i think the latter suggestion sounds better (without having yet read into the capabilities of the Univention firewall).


#3

According to 14.5.1. Filter rules by Univention Configuration Registry this is just a description. Both values should do. But I agree that “SMTP/submission” sounds better.


#4

ah yes of course, en for english description and de for german description… now the dots connected for me :smile: