Using SBS 2003 POP3 Connector with new Office 365 Settings - how to enable SSL??

[badboyhouse]

One of our clients has just received noticed from BT that their email account will be upgraded to the new Office 365 system on 06/11/12.

The client has three sites and so uses the SBS 2003 POP3 connector at each site to download the emails for each user at that site.

This works fine currently but I'm concerned because the new Office 365 system requires SSL on POP port 995 - and the POP3 connector in SBS 2003 does not support SSL.

Does anyone else have a client in the same boat?

I'd rather not configure each user's Outlook with a BT Office 365 POP3 account - this will obviously increase network overheads AND cause issues for those that have Blackberry's and iPhones as it will require ther computers to be switched on at all times in order to receive external emails.

Thanks in advance!

[DaveA]

Hi,

I manage to get you an answer, but I don't think it's one you would like.

Because SBS 2003 doesn't have support for SSL you would need to use a workaround.

There are 2:

1. Get a static IP and point the domain's MX record right at the server.

2. Set up POP accounts manually on the client's machines.

Dave

[Stephenc]

Hi there,

You would probably need to setup reverse dns aswell as the outgoing server also uses TLS / SSL.

You would need to email reverse.dns@btbroadbandoffice.com with your static ip address, primary email address and domain name.

Thanks,

Steve

[spectromage]

I found this on EFS's website. It works with SBS 2003 pop connector! I hope this helps others forced to change by BT... HOW TO RUN EFS TO COLLECT VIA POP3S (SSL)

Natively, EFS does not support POP3S (secure POP3) However, there is simple workaround for this using a very good product called "stunnel". This software 'proxies' the standard EFS POP3 port connecting securely via POP3S. It is exceptionally easy to install and configure, has a small footprint and can run on the same server as EFS (optionally as a service).

Perform the following:

1. Download the latest "stunnel" binary (.exe) from the following location http://www.stunnel.org/download/binaries.html.

Install sTunnel on the same machine as EFS.

3. Create an 'stunnel.conf' file in the stunnel program folder that contains the following (replacing the 'pop3.isp.com:995' portion to be your ISP's POP3S server and port)

client = yes
debug = debug

[pop3s]
accept = 127.0.0.1:1109
connect = pop3.isp.com:995

[smtps]
accept = 127.0.0.1:259
connect = smtp.isp.com:465


4. Change the Pop3 server in EFS to point to 127.0.0.1 and the port to be 1109

5. Optionally, if your ISP supports SMTPS (secure SMTP) then point your local mail server smart host entry (assuming you are configured to use a smart host) to be 127.0.0.1 and port to be 259 and the 'smtp.isp.com:465' to be the remote ISP SMTPS server. Outbound traffic from your mail server to the Internet is then proxied through sTunnel

Essentially EFS connects locally to stunnel on port 1109, and stunnel acts as an intermediary proxying the standard EFS Pop3 port via a secure Pop3 tunnel to your ISP. You can alter the "listening" ports in the config file and EFS if the respective ports are already in use.

[jakobme]

Hi,

the easier way is to use a third party pop3 connector.

Those third party pop3 connectors have a better error handling, more configuration options, like smaller intervalls for pulling messages and often ship with additional features like backup, spam filter and rules.

I use SmartPOP2Exchange from JAM Software which supports SSL for POP3 and IMAP accounts for my customers. (http://www.jam-software.com/smartpop2exchange/index.shtml)

Greetings

Jakob