配置qqpop3

配置pop3用户认证版本1.
0时间2015年7月支持的版本FortiOSv5.
2及更高版本审核已通过hcxie反馈support_cn@fortinet.
com目录功能简介.
3步骤一:配置pop3服务器3步骤二:配置用户组.
3步骤三:在策略中启用认证.
4步骤四:验证.
4功能简介Fortigate防火墙从5.
2开始可以支持pop3的远程认证方式,即在防火墙上配置好pop3服务器的信息,用户就可以通过pop3服务器上的用户名和密码通过防火墙上的用户认证.
步骤一:配置pop3服务器CLI配置如下,configuserpop3edit"popserver"setserver"mail.
fortinet.
com"setport995setsecurepop3snextend注,本例以飞塔邮件服务器做实验步骤二:配置用户组CLI配置如下,configusergroupedit"popgroup"setmember"popserver"nextend步骤三:在策略中启用认证CLI配置如下,configfirewallpolicyedit1setsrcintf"dmz"setdstintf"wan1"setsrcaddr"all"setdstaddr"all"setactionacceptsetschedule"always"setservice"ALL"setlogtrafficdisablesetgroups"popgroup"setnatenablenextend步骤四:验证查看用户认证信息,FG100D3G13814140#diafirewallauthlist192.
168.
1.
168,hcxie,popgrouptype:fw,id:0,duration:23,idled:0expire:300,allow-idle:300flag(20):idlegroup_id:2group_name:popgroup-----1listed,0filtered------查看日志,Debug命令,FG100D3G13814140#diadebenFG100D3G13814140#diadebappfnbamd-1FG100D3G13814140#fnbamd_fsm.
c[1879]handle_req-Rcvdauthreq1forhcxieinpopgroupopt=00000500prot=10fnbamd_fsm.
c[336]__compose_group_list_from_req-Group'popgroup'fnbamd_pop3.
c[573]fnbamd_pop3_start-hcxiefnbamd_pop3.
c[307]fnbamd_pop3_ses_start-popserver(mail.
fortinet.
com)fnbamd_auth.
c[303]radius_start-Didn'tfindradiusservers(0)fnbamd_auth.
c[688]auth_tac_plus_start-Didn'tfindtac_plusservers(0)fnbamd_auth.
c[409]ldap_start-Didn'tfindldapservers(0)fnbamd_fsm.
c[425]create_auth_session-Total1server(s)totryfnbamd_dns.
c[178]fnbamd_dns_parse_resp-req1:208.
91.
113.
80fnbamd_pop3.
c[262]fnbamd_pop3_ses_dns_cb-popserver(mail.
fortinet.
com):50715bd0fnbamd_pop3.
c[366]fnbamd_pop3_ses_write_handler-popserver(mail.
fortinet.
com):1fnbamd_pop3.
c[225]fnbamd_pop3_ses_ssl_connect-popserver(mail.
fortinet.
com):1fnbamd_pop3.
c[185]fnbamd_pop3_ses_ssl_connecting-popserver(mail.
fortinet.
com):1fnbamd_pop3.
c[185]fnbamd_pop3_ses_ssl_connecting-popserver(mail.
fortinet.
com):2fnbamd_pop3.
c[185]fnbamd_pop3_ses_ssl_connecting-popserver(mail.
fortinet.
com):2fnbamd_pop3.
c[185]fnbamd_pop3_ses_ssl_connecting-popserver(mail.
fortinet.
com):2fnbamd_pop3.
c[410]fnbamd_pop3_ses_read_handler-popserver(mail.
fortinet.
com):124fnbamd_pop3.
c[410]fnbamd_pop3_ses_read_handler-popserver(mail.
fortinet.
com):29fnbamd_pop3.
c[410]fnbamd_pop3_ses_read_handler-popserver(mail.
fortinet.
com):30fnbamd_pop3.
c[127]fnbamd_pop3_ses_done-popserver(mail.
fortinet.
com):0fnbamd_comm.
c[169]fnbamd_comm_send_result-Sendingresult0forreq1fnbamd_fsm.
c[565]destroy_auth_session-deletesession1fnbamd_pop3.
c[110]fnbamd_pop3_ses_destroy-popserver(mail.
fortinet.
com):0