Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

Outlook accessing external POP3 Servers

1 view

Skip to first unread message

Marcus

unread,

Jul 26, 2006, 4:33:01 AM7/26/06

Hi,

we are running an ISA2004 Server.

How do I setup an access rule to allow specific users to access external
POP3 Servers with Outlook?

BR
Marcus

Ken Zhao [MSFT]

unread,

Jul 26, 2006, 6:08:44 AM7/26/06

Hello Marcus,

Thank you for using newsgroup!

From your post, I'd like to provide you with the following information for
your reference:

Troubleshooting Firewall Clients in ISA Server 2004
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/troubleshooting_f
wc.mspx#Outlook

Problem: When trying to configure Microsoft Office Outlook 2003 on a
Firewall client for access to external POP3 (for incoming mail) and SMTP
(outgoing mail) servers, you may not be able to communicate with the
external mail servers through an ISA Server computer using RPC over HTTP.

Cause: The default Firewall Client settings that are created during the
installation of ISA Server 2004 include an application setting that
disables the interception and redirection of Winsock function calls from
Outlook (for example, for remoted binding) by Firewall Client in both
Standard Edition and Enterprise Edition. The default setting for Outlook is
intended to ensure that remoted incoming secondary connections are not
established when a remote procedure call (RPC) is used to communicate with
Microsoft Exchange Server. However, this setting also prevents Outlook from
connecting to external POP3 and SMTP servers.

Solution: Enable Firewall Client to intercept Winsock function calls from
Outlook on Firewall clients by manually removing the Firewall Client
setting for Outlook with the key Disable in ISA Server Management on the
ISA Server computer, and then create new settings for Outlook that prevent
the establishment of remoted incoming secondary connections (by configuring
Firewall Client to bind all TCP and UDP port ranges locally for Outlook).

To remove the Outlook setting with the key Disable, perform the following
steps:

1. In ISA Server Management, expand the Configuration node, and then click
General.
2. In the details pane, click Define Firewall Client Settings.
3. On the Application Settings tab, select the outlook setting with the key
Disable in the Settings list, and then click Delete.

To ensure that Firewall Client does not interfere with local mail server
traffic and to prevent the establishment of remoted secondary connections
for Outlook, add settings for Outlook with the keys LocalBindTcpPorts and
LocalBindUdpPorts, and set their values to 0-65535. These entries will bind
all TCP and UDP ports locally and ensure that remoted secondary connections
cannot be established. To add these settings, perform the following steps:

1. In ISA Server Management, expand the Configuration node, and then click
General.
2. In the details pane, click Define Firewall Client Settings.
3. On the Application Settings tab, click New.
4. In Application, type outlook.
5. In Key, select LocalBindTcpPorts.
6. In Value, set the value to 0-65535. Then click OK.
7. Repeat steps 3 and 4.
8. In Key, select LocalBindUdpPorts.
9. In Value, set the value to 0-65535. Then click OK.

More Reference:
=============
The following article describes how to create an access rule that enables
POP3 access in ISA Server 2004.
891234: How to enable POP3 access to an external POP3 server in ISA Server
2004
http://support.microsoft.com/default.aspx?scid=kb;EN-US;891234

Configure destination network objects for an access rule
<http://www.microsoft.com/technet/prodtechnol/isa/2004/help/FW_H_CnfDestAcce
ssRule.mspx?mfr=true>

Hope that helps!

Thanks & Regards,

Ken Zhao

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

0 new messages