Using a UAL SSL port other than the default 5767

From Scalix Wiki
Jump to: navigation, search

Sometimes due to firewall restrictions it is not possible to connect to Scalix on port 5767, even though other ports are available.

Please note: Circumvention of firewalls in this way may not be legal, or may violate corporate policy. Please talk to your system administrator ahead of time. Also, this is not recommended for normal use, only if there is no alternative, as it will place additional load on your Windows system.

Configuring the server

  • Normally your stunnel.conf will be similar to the following:
CAFile = cacert-bundle.crt
cert = stunnel.pem
client = no
options = NO_SSLv2
[imaps]
accept = 993
connect = imap
[uals]
accept = 5767
connect = 5729
  • Pick a suitable port on your server. I in this example I am going to use 22.
  • Verify the port is indeed unsused:
lsof -i:22
  • Change your stunnel.conf as follows:
CAFile = cacert-bundle.crt
cert = stunnel.pem
client = no
options = NO_SSLv2
[imaps]
accept = 993
connect = imap
[uals]
accept = 5767
connect = 5729
[uals-alt]
accept = 22
connect = 5729
  • stop and restart stunnel and connect to the server from a different PC, verifying it is listening on the right port.

Configuring the client

Configuring the client using commercial software

  • Install AUTAPF
  • In AUTAPF go to New, then fill in the fields as required:
    • Local port: 5767
    • Local interface: 127.0.0.1
    • Remote port: 22 (as defined on the server)
    • Remote host address: The IP address of the Scalix server
  • Edit c:\windows\system32\drivers\etc\hosts and add the Scalix server to the localhost entry
127.0.0.1    localhost    scalix.domain.com
  • Run Outlook to see if the new configuration works correctly.

Configuring the client using FOSS software

  • Extract the archive somewhere (e.g. c:\apps\rinetd)
  • Create a rinetd.conf file in the same directory, containing:
127.0.0.1 5767 <Scalix server IP> <scalix server port as defined above>
  • Create a scalix-redirector.bat file in the same directory, containing:
@echo off
rinetd.exe -c rinetd.conf
  • Edit c:\windows\system32\drivers\etc\hosts and add the Scalix server to the localhost entry
127.0.0.1    localhost    scalix.domain.com
  • Run the scalix-redirector.bat in a terminal window
  • Run Outlook to see if the new configuration works correctly.
Retrieved from "https://www.scalix.com/wiki/index.php?title=Using_a_UAL_SSL_port_other_than_the_default_5767&oldid=15457"