firewall and POP3

[Fred Martin_1]

I am being asked to allow users to POP in to get their email from our HP-UX sendmail server. What am I risking by opening up port 110?

I have a VPN portal but the devices they are using don't support a VPN client.

I'm somewhat concerned as this is a simple case, these users also have unix accounts on the same server, hence logins/passwords match the email login.

No DMZ.

Advise?

[Fred Martin_1]

Sendmail 8.11.1 (Revision 1.6)
HP-UX B.11.11

[Sundar_7]

What am I risking by opening up port 110? - The same risks associated with opening any other port (Say your port 25) :-)

You need to install some kind of POP3 server in your UX box. If it is 11i ,you can download Qpopper from software.hp.com.

Configure inetd to start Qpopper and also install TCP/Wrapper, if you will, and define the hosts allowed to connect to your POP3 server.

You can do the same thing with the firewall, but using TCP/Wrapper will be an extra layer of protection, just incase.

[Fred Martin_1]

Already running POP3, as I have internal PCs picking up email as well.