fortigate firewall and zimbra

[snake_eyes]

Hello,

I have a physical firewall called "fortigate" before the zimbra, I just wanna know in general which ports should be open in order to zimbra work probably.

Although I should turn the Linux firewall on "iptables" when I finish the forti gate configuration in order to go step by step to avoid any troubles with the sending.

Thank you in advance...

Cheers,

[phoenix]

You will need port 25, port 443 (if you're using https) and port 587 (if you use the submission port) and that should do it - I'm assuming that you just want the mail and webmail ports open. If you want a list of ports have a look here: Ports - Zimbra :: Wiki

[dwmtractor]

You might have a look at this post, and the thread around it, as there are other issues than just open ports that may cause you issues. Don't get me wrong because having your Zimbra server behind a firewall is the right thing to do, just need to have it configured properly. . .

[snake_eyes]

thank you for you information,

what about if I wanna HTTP only I supposed to open 80 only or it need the 25 to deliver the messages?

I understand the webmail what does mean but what do you mean with the mail?

Cheers,

[dwmtractor]

Originally Posted by snake_eyes

thank you for you information,

what about if I wanna HTTP only I supposed to open 80 only or it need the 25 to deliver the messages?

I understand the webmail what does mean but what do you mean with the mail?

Cheers,

Yeah, without port 25 you haven't got much of a mailserver

I'm a stickler for security which is why I don't open ANY of the non-encrypted ports to the outside world except for 25. All my POP, IMAP and SMTP relay (that is, authenticated SMTP from my users) are done on the SSL ports. But 25 has to be the exception to that rule if you want your mailserver to actually serve any mail. . .

[phoenix]

If you want http then port 80, I'd recommend you don't use that but use https instead. I meant mail receipt for port 25.

[snake_eyes]

Originally Posted by phoenix

If you want http then port 80, I'd recommend you don't use that but use https instead. I meant mail receipt for port 25.

thank you for your advice, I'm accessing my zimbra thru http://mail.x.com
how do I change it to https ? although I tried but I got:

Failed to Connect
Firefox can't establish a connection to the server at mail.x.com
Though the site seems valid, the browser was unable to establish a connection.
* Could the site be temporarily unavailable? Try again later.
* Are you unable to browse other sites? Check the computer's network connection.
* Is your computer or network protected by a firewall or proxy? Incorrect settings can interfere with Web browsing.

Cheers,

[dwmtractor]

Originally Posted by snake_eyes

thank you for your advice, I'm accessing my zimbra thru http://mail.x.com
how do I change it to https ?

CLI zmtlsctl to set Web Server Mode - Zimbra :: Wiki