Iphone and Security login issue to PSA / Qmail / PoP3

[Galactic Zero]

I have some clients that are trying to connec their Iphone to their pop mail accounts. All the information for the mail server etc is correct yet they get an authentication error when connecting.

With outlook '03 you have to choose use same credentials as the login and with '07 you have to choose login first before sending. So, what needs to happen for the Iphone if anyone knows.

Thanks.

[faris]

I suspect tha iPhone will have the same issues as other Mac mail clients (and Outlook 2007) - they aren't compatible with full smtp auth IF and only IF you have pop-before-relay enabled in plesk.

So I'd either kill off pop-before-relay or ask them to receive before sending, if that option is available in an iphone, to see if it makes any difference?

Faris.

[Galactic Zero]

as for PoP before relay which is best practice, leave it on or disable it?

[faris]

Disable it if possible.

You will get calls from a lot of people who were using it without realising it as well as those who were using it deliberately, but by disabling it you will close what is effectively a bit of a security hole.

The other thing you can do if absolutely necessary is to enable the submission port (587) and disable pop-before-relay on that port only (by editing the file in /etc/xinetd.d/(whatever-it-is-called) ). Then get your customers who are using authentication to switch to that port.

Faris.

[Galactic Zero]

I currently have all users on 587.

Here are my settings under server / mail in PSA:

Relay options
Relaying
Selected: authorization is required:
Selected: POP3 lock time 5 Min
Selected: SMTP

[aus-city]

iPhone does not use pop3 but IMAP.

iPhone connects to the server ssl port 993 for incoming.

To send mail ssl on port 587

Make sure you use secure authentication and accept the certificate the first time you check email and then send email.

Works like a dream!

[Galactic Zero]

Thanks, the Imap connection worked like a charm...