Overview

When you install Kerio Connect on a local network behind a firewall (Kerio Control), you must map the ports properly to send and receive communication over the network.

Solution

1. In the Kerio Control administration interface, go to Configuration (gear icon).
2. Select Traffic Rules.
    
   
    
3. Click Add.
    
   
   
4. In the Add New Rule wizard, type the name of the rule.
5. Select Port mapping.
6. In the Host field, type the hostname or the IP address of the SMTP server placed in your local network.
7. Next to the Service field, click Select.
   
   
     
8. In the Select Items dialog, check the ports and map them as follows:
    
   
      
   

   Service (default port)	Incoming connection
   SMTP (25)	allow
   SMTPS (465)	allow
   SMTP Submission (587)	allow
   POP3 (110)	deny
   POP3S (995)	allow
   IMAP (143)	deny
   IMAPS (993)	allow
   NNTP (119)	deny
   NNTPS (563)	allow
   LDAP (389)	deny
   LDAPS (636)	allow
   HTTP (80, 4040, 8800)	deny
   HTTPS (443, 4040, 8843)	allow

     
9. Click Finish.
   
   
   
10. The traffic rule should be placed at the top of the list.
    
    

    Note: in some environments, it was needed to add TCP port 443 manually to the above traffic rule.

Back to top

Confirmation

The Kerio Control firewall settings are set. You can send and receive emails over the local network behind the firewall. The Kerio Connect Webmail page is accessible from the outside network.

Back to top