Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Blackberry devices no longer email

    Scheduled Pinned Locked Moved General pfSense Questions
    17 Posts 3 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      brcisna
      last edited by

      Thanks for the feedback everyone.
      I do have port 80 forwarded as well to the email server.
      Webmail does work fine remotely.
      It appears it is an Blackberry specific problem. Not sure what is hanging them though? I'll have to do a Wireshark marathon from the email server itself,and see were the connection quits back and forth. If there happens to be any Blackberry experts on board,,maybe they have seen the fix for this?
      Also I have tested with Outlook ,OE,Evolution remotely and they all work fine as well.
      hhmmm,,,,?

      Thanks,
      Barry

      1 Reply Last reply Reply Quote 0
      • E
        Eugene
        last edited by

        @brcisna:

        Thanks for the feedback everyone.
        I do have port 80 forwarded as well to the email server.
        Webmail does work fine remotely.
        It appears it is an Blackberry specific problem. Not sure what is hanging them though? I'll have to do a Wireshark marathon from the email server itself,and see were the connection quits back and forth. If there happens to be any Blackberry experts on board,,maybe they have seen the fix for this?
        Also I have tested with Outlook ,OE,Evolution remotely and they all work fine as well.
        hhmmm,,,,?

        Thanks,
        Barry

        No need to Wireshark, do this```
        tcpdump -ni  <lan int="" name=""> net 206.51.26.0/24</lan>

        it will show communication with Blackberry servers.

        http://ru.doc.pfsense.org

        1 Reply Last reply Reply Quote 0
        • B
          brcisna
          last edited by

          Eugene,

          Thanks for the tip. Hopefully using the command you provided it will not be a tcpdump marathon,,,:-).
          OK, so if the internal email server's ip address is 172.28.8.55 , I would run in a shell on pfSense machine:

          tcpdump -ni  172.28.8.55 net 206.51.26.0/24

          This seems idiot proof,even for me!

          One thing I noticed I do not have port 443 forwarded and wonder if this may be required for Blackberry devices to try and at least negotiate at secure login first?

          Does pfSense come with tcpdump installed?

          Thanks,
          Barry

          1 Reply Last reply Reply Quote 0
          • E
            Eugene
            last edited by

            No, mail server is out of picture here if you do not have Blackberry Enterprise server running within your Organization.
            I suppose blackberries use your network via WiFi to connect to RIM's servers to synchronize e-mails.
            So command would be
            tcpdump -ni em0 net 206.51.26.0/24

            substitute em0 with real interface name of your LAN (bge0? rl0?).

            http://ru.doc.pfsense.org

            1 Reply Last reply Reply Quote 0
            • B
              brcisna
              last edited by

              Eugene,

              Thanks again!
              With our old firewall setup,,,somehow,,all of the blackberry users could use it for our email server. I honestly don't even know how they set it up…:-). I m not even sure how all of the BB Enterprise sever thing even comes into play. It sounds like yet another maintenence nightmare right off of the bat. We do have lots of people now that have Blackberrys,,even in our little hillbilly community school  so I have to get this resolved asap!,,,:-).
              Are you saying it should not even be able to use this with an non Blackberry type email server?
              I'll give the command you provided a spin!

              Thanks!
              Barry

              1 Reply Last reply Reply Quote 0
              • Cry HavokC
                Cry Havok
                last edited by

                You're still confusing webmail (80 or 443) which involves using a web server to access your email, and SMTP, POP3 and IMAP (25, 110 and 143).  Don't mix them up.

                Please post a screenshot of your WAN interface rules.

                1 Reply Last reply Reply Quote 0
                • E
                  Eugene
                  last edited by

                  Blackberry does not connect to your e-mail server even being connected to your LAN. Even if you see e-mails from your server on your BB. It actually does not have e-mail client in the sense we use this word. It does not work this way. BB connects to a server at RIM (Research In Motion) over secure protocol developed by RIM, and this server pulls e-mails from your e-mail server showing them on your BB. The same (but opposite direction) is true for sending e-mails.
                  Again, when you go to WEB from your BB trying to see some web-page your BB sends request to some server in RIM and RIM then delivers contents from this page to you BB.
                  Actually it is very interesting topic "how blackberry works". I might be mistaken in what I've said above but this is what I've traced setting up ipsec-tunnel Blackberry - pfSense.

                  http://ru.doc.pfsense.org

                  1 Reply Last reply Reply Quote 0
                  • B
                    brcisna
                    last edited by

                    Thanks again to all for info provided.

                    Havok, When I get back to the salt mines Monday I'll put some screen shots of the WAN firewall rules .
                    Eugene, Sounds like you been nerding on the BB architecture,,,:)
                    Only thing different I can see is the former firewall/commercial setup,,,did have both an smtp and and pop3 relay built into it.
                    But,,,as I stated earlier I can make Outlook ,Outlook Express, Evolution work without a hitch remotely–telnet 25--sendmail  & 110--dovecot ,,,blah,,blah,works,, as well as inside the LAN. Webmail works fine both remotely and LAN side too,FYI.
                    Seems like there must be a port missing for BB servers to pull/push from the internal email server.
                    Do any of you's think enabling the nat reflection would do any good? Guess I'll just have to do the tcpdump routine  Monday and see were the chatter quits at.
                    Asking again as I have not had to use it,,,is tcpdump installed on pfSense 1.2.3 by default?
                    pfSense is working pretty sweet so far,,other than the BB snafoo.:)

                    Take Care,
                    Barry

                    1 Reply Last reply Reply Quote 0
                    • B
                      brcisna
                      last edited by

                      Hello All,

                      Attaching two screen shots of the pfSense WAN rules. I added the last two entries in Wan_02 just to see if BB devices would work,which they did not. I see I do not have port 143 forwarded ,but we can in fact log into Webmail remotely as I have a dedicated VIP for this. Could this be why the BB devices are not touching the internal email server correctly?
                      FYI: The internal email server IP is 172.28.8.55
                      Someone can look at the screen shots and tell me what I have wrong?…:-)
                      I would guess there are some redundancies as I was desperate trying to get the BB's to work.

                      Thanks,
                      Barry

                      Wan_01.jpg
                      Wan_01.jpg_thumb
                      Wan_02.jpg
                      Wan_02.jpg_thumb

                      1 Reply Last reply Reply Quote 0
                      • E
                        Eugene
                        last edited by

                        Obviously you do not understand what you are doing and what is even more sad you are not listening to us. I think commercial support http://www.pfsense.org/index.php?option=com_content&task=view&id=62&Itemid=73 is the way to go.

                        http://ru.doc.pfsense.org

                        1 Reply Last reply Reply Quote 0
                        • Cry HavokC
                          Cry Havok
                          last edited by

                          Barry,

                          As it says in my signature - don't PM me for assistance or to direct my attention to a post.

                          I've said everything I need to say.  As Eugene says you're not listening to us so there's no point in us wasting our time with you.

                          1 Reply Last reply Reply Quote 0
                          • B
                            brcisna
                            last edited by

                            Thanks to all who provided ideas on a resolve for the BB email problem.
                            I wound up deleting all port forwards,and recreated tcp 25,110,143 along with 80/VIP for imap and BB works fine now.
                            Also used the tcpdump  command provided by Eugene to see interaction between pfSense box and BB servers as well.
                            Hope some day I become important as well.

                            Thanks,
                            Barry

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.