Gmail and Avast Providers

I’m using Gmail as email address, but it use the SSL protocol to comunicata and Avast is not compatibile. Is possible to eliminate the provider that check the email? In this case is unusued and it only “eat” my memory :smiley:
Bye

Just disable the provider(s) you don’t need/want in the on-access control panel.

To set up SSL gmail with avast!, using Stunnel and openSSL, you need to do 3 things:

  1. In your email client, use
    localhost:11111 for your pop server
    localhost:11026 for your smtp server
    Do not check “use secure”

  2. In avast! email provider add
    11111 to the pop3 ports to redirect
    11026 to the smtp ports to redirect

  3. With a text editor, create Stunnel.conf (or cut/paste below)
    Stunnel.conf, the configuration file, looks exactly like this for gmail:

client=yes

POP3 service, listens on localhost:11111

[gmail-pop3s]
accept=localhost:11111
connect:995=pop.gmail.com

SMTP service, listens on localhost:11026

[gmail-smtps]
protocol=smtp
accept=localhost:11026
connect:587=smtp.gmail.com

You need to download and install OpenSSL from http://www.openssl.org/related/binaries.html and Stunnel from http://www.stunnel.org/download/binaries.html and install them. Stunnel can either be installed as a windows service or added to your startup group. Put stunnel.conf in the same folder as stunnel.

There are a large number of users of secure email with avast! who can help here in the forum if you have problems/questions. Give it a try!

I’m using GMX and so i want to know if OpenSSL and Stunnel are right for this.

I changed in the “Stunnel.conf” file gmail to the correct GMX server but there is no session active in Stunnel.

What should i do?

server007

Did you follow sded’s instructions?
Anyway, take a look here: http://forum.avast.com/index.php?topic=10428.0 to see how to set up secure email with avast!.

sded, I need to setup avast with a Att Yahoo SSL connection. I see your instruction here for Gmail. The server settings are obvious but what about the area with [gmail-pop3s] and [gmail-smtps]. Can I just use [AttYahoo-pop3s] and [AttYahoo-smtps]? Here are the instructions from Att.

1.Open your email client program.
2.Locate the email account settings for your particular client.
3.Change the POP server to pop.att.yahoo.com.
4.Change the SMTP server to smtp.att.yahoo.com.
5.Check the option labeled Use an encrypted connection (SSL) and change the SMTP port to 465.
6.Check the option labeled Use an encrypted connection (SSL) and change the POP3 port to 995.
7.Confirm the above settings then click OK.

I think so, but I’m not sure.
The other configurations I can’t test. My stunnel configuration is:

cert = stunnel.pem

# GMail
client=yes

# POP3 service, listens on localhost:11110
[gmail-pop3s]
accept=127.0.0.1:11110
connect=pop.gmail.com:995

# SMTP service, listens on localhost:11025
[gmail-smtps]
protocol=smtp
accept=127.0.0.1:11025
connect=smtp.gmail.com:587

Should work, per their instructions. If there is an smtp problem, you may also need to comment out the “protocol=smtp” with a ;–ISPs are sometimes a little loose with TLS vs SSL. The stuff in the brackets is just the name stunnel uses to identify the section of commands and can be anything.

Sounds good, thanks form the info, haven’t had much of a chance to mess with it yet.
Busy, busy, busy, Thanks again!!

Have it setup but am getting a error in Outlook Express.

The host ‘localhost:11111’ could not be found. Please verify that you have entered the server name correctly. Account: ‘SBC Yahoo’, Server: ‘localhost:11111’, Protocol: POP3, Port: 995, Secure(SSL): Yes, Socket Error: 11001, Error Number: 0x800CCC0D

Here is the stunnel.conf file

client=yes

POP3 service, listens on localhost:11111

[att-yahoo-pop3s]
accept=localhost:11111
connect:995=pop.att.yahoo.com

SMTP service, listens on localhost:11026

[att-yahoo-smtps]
protocol=smtp
accept=localhost:11026
connect:465=smtp.att.yahoo.com

Please Help!! Thanks!

Based on Tech’s settings he is using localhost:11110 and you are using localhost:11111, I have no idea if that is critical or you can choose the localhost port.

Also were Tech uses accept=127.0.0.1:11110 you are just putting in accept=localhost:11111 perhaps you could try the 127.0.0.1:11110

Thanks for the reply DavidR. I tried settings like Tech’s but no luck. I also tried 127.0.0.1 instead of localhost in Outlook Express but still no luck. Any other suggestions? Thanks!!

Norm321,

did you first ensure that you knew how to make the secure connection work between Yahoo and Outlook Express before you tried to insert STunnel in the mix?

You are begging for trouble if you do not.

Hey alanrf, yes I have it working right now and had it working before I changed some settings to accomidate Stunnel. I will tinker with it some more. I tried a number of ways so far but have a few more ideas. I have plenty of sticktoittivness and won’t give up until I get it. I like how in avast you can add the extra ports to redirect by placing a comma between them. This is great because I have multiple email
accounts.

Thanks!!

Got it working. Here is the stunnel.conf file and the Outlook Express settings for anyone that needs to get setup for avast to scan ATT Yahoo SSL mail.

#attyahoo

client=yes

POP3 service, listens on localhost:11110

[att-yahoo-pop3s]
accept=127.0.0.1:11110
connect:995=pop.att.yahoo.com

SMTP service, listens on localhost:11025

[att-yahoo-smtps]
;protocol=smtp (removed with ; in front of this)
accept=127.0.0.1:11025
connect:465=smtp.att.yahoo.com

In Outlook Express in the Properties for your Account on the Server tab use
127.0.0.1 for both POP and SMTP servers.

Then on the Advanced tab use 11110 for the POP Port
and use 11025 for the SMTP Port. DO NOT check This Server Requires a Secure Connection(SSL).

Then remember to add the ports 11110 and 11025 into the redirect ports in the email section of avast.

Thanks for posting the solution. If anybody needs a solution for Yahoo I’ll address him/her to your post 8)

Now I have another dilema. I tried to setup my wife’s system with the same configuration as she too has Att Yahoo mail. She uses Incredimail however. Everything works as far as sending and receiving but avast is not scanning the outgoing mail. The blue avast ball spins but the mail scanning tray icon does not appear. avast is set to insert a clean note and you guessed it it does not appear in the sent email. The mail scanning tray icon appears for incoming mail and the note appears on those incoming emails. Do you think this is an avast quirk or do i possibly have to alter the stunnel config file somehow? Thanks in advance!!

Norm, maybe you can add the following line to the [MailScanner] section of \data\avast4.ini:
Log=20
Then generate some traffic, simulate the problem (i.e. force the avast mail scanner to time out by sending an email with attachment) and then post here the contents of the file \data\log\aswMaiSv.log

Details: http://forum.avast.com/index.php?topic=12234.msg103474#msg103474

I would say this is an Incredimail quirk.

Incredimail and clean notes are a nightmare even without trying to configure it for SSL email. This forum is littered with people having problems inserting clean notes into incredimail. The way incredimail multi-part mime with HTML and Text parts to the email, avast has to do two clean notes one for HTML and one for the Text parts of the email. Incredimail seems to have problems with this where the email appears malformed with a mix of text amd html.

Personally I see little value in the insertion of clean notes. I don’t take any notice of them (trusting sod aren’t I) and neither does avast it still scans your email, the same is true of other AVs, they just do what they should, scan the email. There are even spam and malicious email that has a fabrication of a clean note from a well known AV, just to lull people into a false sense of security.

Me too.

David got the point… if you search the board maybe you can find more.

For me, clean notes are good advertisement to avast, nothing more 8)