Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Checking Email Wirelessly With Apple iPhone

    Firewalling
    2
    7
    788
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      newUser2pfSense
      last edited by

      Does anyone know if the Apple iPhone uses a specific protocol to check Gmail email by wireless?  I've enabled the following firewall rules on my wireless:
      1)  TCP/UDP port 53
      2)  HTTP port 80
      3)  HTTPS port 443
      4)  UDP port 123

      I just noticed that my iPhone is not checking my Gmail email as it should.  Any suggestions?

      Thank you.

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        Try 110, 143, 993, and 995. (pop3, imap, imaps, and pop3s)

        And 25, and 587 for sending. (SMTP and SMTP Submit. You probably only need 587 there.)

        This is not just gmail/iphone, but any SMTP/POP3/IMAP mail server/client.

        It looks like gmail does not accept pop3 connections on 110 +STARTTLS and you must use TLS on port 995 instead.

        The same probably applies to IMAP. They do appear to accept authenticated STARTTLS connection on port 25 in addition to 587.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • N
          newUser2pfSense
          last edited by

          I thought about adding IMAP but I was able to get to Gmail from my wireless Macbook Pro; that's getting to it via the web URL though.  As well, from my wired network, I can get to Gmail with no issues; from the web URL.

          I'm using the iOS built in configuration to check for my Gmail email, not the Gmail app.

          1 Reply Last reply Reply Quote 0
          • N
            newUser2pfSense
            last edited by

            Ok, so I added TCP ports 143 and 993 and I was able to get to my Gmail email with the built in iOS email check.  I thought port 143 was TCP/UDP though.  The straight TCP for 143 appeared to work.

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              Yeah. That is pop3/imap, not https.

              Mine looks like it's using IPv6 IMAPS on port 993 to access the gmail mailbox.

              WAN tcp 2600:8801:x❌x❌x:add4[53869] -> 2607:f8b0:400e:c04::6d[993] ESTABLISHED:ESTABLISHED 24 / 23 3 KiB / 4 KiB

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                None of this is UDP. It's all TCP.

                110 is POP3, possibly supporting STARTTLS
                143 is IMAP, possibly supporting STARTTLS
                993 is IMAPS, requiring a TLS connection
                995 is POP3S, requiring a TLS connection

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • N
                  newUser2pfSense
                  last edited by

                  Looks like I'm back in business.  Thank you for taking time out to help.  I appreciate it!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.