# Dzigzo with Email Client (roundcube) to access Gmail **URL:** \ **Category:** Gateway\ **Created:** [October 25, 2012, 9:33pm UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334 "2012-10-25T21:33:00Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![A\_G](https://avatars.discourse-cdn.com/v4/letter/a/d78d45/32.png) [@A\_G](https://community.ciphermail.com/u/A_G)\ **Post date:** [October 25, 2012, 9:33pm UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/1 "2012-10-25T21:33:00Z")
Hi, I'm currently accessing Gmail through an email client (roundcube). I would like my emails to be encrypted and would like to use Djigzo as a Gateway. This is how it would be: Email Client -\> Djigzo -\> Gmail My current understanding is that I've to add "smtp.gmail.com" under "External relay host" under MTA config for Djigzo along with username and passwords for all users. What I don't know are the settings that need to be done at the email client's end (smtp, pop/imap, port numbers) to be able to access and send emails through Djigzo. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [October 26, 2012, 7:37am UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/2 "2012-10-26T07:37:00Z")
The DJIGZO gateway only supports the SMTP part. It does provide any POP3 or IMAP functionality. Based on your description it seems you are using Roundcube as an email client for your email stored on Gmail. So in this case the DJIGZO gateway will only support outgoing email: Roundcube -\> DJIGZO -\> Gmail -\> Internet recipient(s) Since the DJIGZO gateway does \*not\* provide POP3 or IMAP, decryption of incoming email cannot be directly handled by the DJIGZO gateway unless the email is sent by SMTP to the DJIGZO gateway. Support for decryption "on the fly" requires a POP3 or IMAP proxy that can decrypt email when it's downloaded. I can think of three options. 1. Use Fetchmail to download email from Gmail to a local email box. New email will be downloaded from Gmail and then sent through the gateway for decryption and after decryption the email is sent to the internal email from which you can POP3 or IMAP. This is supported out of the box with the DJIGZO virtual appliance (you should enable Fetchmail support on the console). Downside of this approach is that the email on Gmail is more or less duplicated on your own local box 2. Do the decryption on Roundcube. Seems however that Roundcube does not yet support S/MIME in the client (it's a planned feature). Some other webmail clients (like for example Horde) support S/MIME in the client. 3. Use PDF encryption instead of S/MIME. With PDF encryption you can locally decrypt the file. Downside is that if all your email is PDF encrypted, opening an email is kind of a burden since you need to provide a password all the time. Kind regards, Martijn > **路路路** > > On 10/25/2012 11:33 PM, A G wrote: > > > Hi, > > > > I'm currently accessing Gmail through an email client (roundcube). I would like > > my emails to be encrypted and would like to use Djigzo as a Gateway. This is how > > it would be: > > > > Email Client -\> Djigzo -\> Gmail > > > > My current understanding is that I've to add "smtp.gmail.com" under "External > > relay host" under MTA config for Djigzo along with username and passwords for > > all users. What I don't know are the settings that need to be done at the email > > client's end (smtp, pop/imap, port numbers) to be able to access and send emails > > through Djigzo. > > -- > DJIGZO email encryption ---
**Author:** ![Christine](https://avatars.discourse-cdn.com/v4/letter/c/8491ac/32.png) [@Christine](https://community.ciphermail.com/u/Christine)\ **Post date:** [October 29, 2012, 9:36am UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/3 "2012-10-29T09:36:02Z")
> The DJIGZO gateway only supports the SMTP part. It does provide any > POP3 or IMAP functionality. What Martijn meant to say is that the DJIGZO gateway does not provide POP# or IMAP functionality. He accidentally left out the word "not", which I hope was obvious, if not, it made the email somewhat hard to understand 馃檪 dagdag Christine > **路路路** > > On 10/26/2012 09:37 AM, Martijn Brinkers wrote: > > > Based on your description it seems you are using Roundcube as an email > > client for your email stored on Gmail. So in this case the DJIGZO > > gateway will only support outgoing email: Roundcube -\> DJIGZO -\> Gmail > > -\> Internet recipient(s) Since the DJIGZO gateway does \*not\* provide > > POP3 or IMAP, decryption of incoming email cannot be directly handled > > by the DJIGZO gateway unless the email is sent by SMTP to the DJIGZO > > gateway. Support for decryption "on the fly" requires a POP3 or IMAP > > proxy that can decrypt email when it's downloaded. I can think of > > three options. 1. Use Fetchmail to download email from Gmail to a > > local email box. New email will be downloaded from Gmail and then sent > > through the gateway for decryption and after decryption the email is > > sent to the internal email from which you can POP3 or IMAP. This is > > supported out of the box with the DJIGZO virtual appliance (you should > > enable Fetchmail support on the console). Downside of this approach is > > that the email on Gmail is more or less duplicated on your own local > > box 2. Do the decryption on Roundcube. Seems however that Roundcube > > does not yet support S/MIME in the client (it's a planned feature). > > Some other webmail clients (like for example Horde) support S/MIME in > > the client. 3. Use PDF encryption instead of S/MIME. With PDF > > encryption you can locally decrypt the file. Downside is that if all > > your email is PDF encrypted, opening an email is kind of a burden > > since you need to provide a password all the time. Kind regards, Martijn > > -- > dagdag is just a two character rotation of byebye ---
**Author:** ![A\_G](https://avatars.discourse-cdn.com/v4/letter/a/d78d45/32.png) [@A\_G](https://community.ciphermail.com/u/A_G)\ **Post date:** [November 18, 2012, 4:09am UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/4 "2012-11-18T04:09:56Z")
Martijn, Thanks for your inputs. I went ahead with option 3 that you suggested. I've implemented TLS on the server and enabled pdf encryption instead of S/MIME. The mail is sent successfully from Roundcube and is also received by the Djigzo gateway. When it is sent from the gateway, the mail is not getting delivered to the recepient from the Gmail server. The external user has been added under "Settings". Following are the additional lines that I added for TLS in MTA Raw config: smtp\_sasl\_auth\_enable = yes smtp\_sasl\_password\_maps = hash:/etc/postfix/smtp\_client\_passwd smtp\_sasl\_type = cyrus #smtp\_tls\_CApath = /etc/postfix/certs/ smtp\_sasl\_security\_options = smtp\_tls\_CApath = /etc/postfix/certs/ smtpd\_tls\_cert\_file = /etc/postfix/ssl/ssl.pem smtpd\_tls\_key\_file = /etc/postfix/ssl/ssl.key smtpd\_tls\_security\_level = may smtpd\_tls\_session\_cache\_database = btree:${data\_directory}/smtpd\_scache smtp\_tls\_session\_cache\_database = btree:${data\_directory}/smtp\_scache smtpd\_tls\_loglevel = 1 smtpd\_use\_tls = yes smtpd\_tls\_auth\_only = no Also, following is what shows up in the "Logs" tab: status=deferred (conversation with smtp.gmail.com[173.194.76.109] timed out while receiving the initial server greeting) Any idea what I might be doing wrong here? ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [November 18, 2012, 8:15am UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/5 "2012-11-18T08:15:28Z")
Can you check the following: 1. Check if the "External relay host" on the MTA page is set to: host: smtp.gmail.com mx: do not select port: 587 2. Did you add your Gmail credentials on the sasl passwords page: Add a new sals password entry with the following settings: Server: smtp.gmail.com Port: 587 Username: YOUR\_GMAIL\_ADDRESS(a)gmail.com Password: YOUR\_PASSWORD Make sure you apply the settings on the SASL passwords page to make the sasl settings active. Kind regards, Martijn Brinkers > **路路路** > > On 11/18/2012 05:09 AM, A G wrote: > > > Martijn, > > > > Thanks for your inputs. I went ahead with option 3 that you suggested. > > > > I've implemented TLS on the server and enabled pdf encryption instead of S/MIME. > > The mail is sent successfully from Roundcube and is also received by the Djigzo > > gateway. When it is sent from the gateway, the mail is not getting delivered to > > the recepient from the Gmail server. The external user has been added under > > "Settings". > > > > Following are the additional lines that I added for TLS in MTA Raw config: > > > > smtp\_sasl\_auth\_enable = yes > > smtp\_sasl\_password\_maps = hash:/etc/postfix/smtp\_client\_passwd > > smtp\_sasl\_type = cyrus > > #smtp\_tls\_CApath = /etc/postfix/certs/ > > smtp\_sasl\_security\_options = > > > > smtp\_tls\_CApath = /etc/postfix/certs/ > > smtpd\_tls\_cert\_file = /etc/postfix/ssl/ssl.pem > > smtpd\_tls\_key\_file = /etc/postfix/ssl/ssl.key > > smtpd\_tls\_security\_level = may > > smtpd\_tls\_session\_cache\_database = btree:${data\_directory}/smtpd\_scache > > smtp\_tls\_session\_cache\_database = btree:${data\_directory}/smtp\_scache > > > > smtpd\_tls\_loglevel = 1 > > > > smtpd\_use\_tls = yes > > smtpd\_tls\_auth\_only = no > > > > Also, following is what shows up in the "Logs" tab: > > > > status=deferred (conversation with smtp.gmail.com[173.194.76.109] timed out > > while receiving the initial server greeting) > > > > Any idea what I might be doing wrong here? > > -- > DJIGZO email encryption ---
**Author:** ![A\_G](https://avatars.discourse-cdn.com/v4/letter/a/d78d45/32.png) [@A\_G](https://community.ciphermail.com/u/A_G)\ **Post date:** [January 3, 2013, 10:25pm UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/6 "2013-01-03T22:25:02Z")
Hi Martijn, Thanks for your reply. I got it working. I had to delete few lines in MTA Raw config. I've another query regarding pdf encryption using random password generation. Presently, there is an option to send the password to the sender. Is it possible to send it to the recipient also? My only concern is the additional step a sender has to take to deliver a message to the receiver. Thanks ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [January 3, 2013, 10:34pm UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/7 "2013-01-03T22:34:39Z")
Although you might get this behaviour by modifying the config.xml file (which contains all the mail handling rules), sending the password to the recipient by email kind of defeats the purpose of encryption since the email with the password will be sent by plain text. I suggest you try the One Time Password (OTP) mode first to see whether that is an acceptable procedure. The OTP mode is in my view a good trade-of between security and ease of use. Kind regards Martijn Brinkers > **路路路** > > On 01/03/2013 11:25 PM, AG wrote: > > > Thanks for your reply. I got it working. I had to delete few lines in MTA > > Raw config. I've another query regarding pdf encryption using random password > > generation. Presently, there is an option to send the password to the sender. Is > > it possible to send it to the recipient also? My only concern is the additional > > step a sender has to take to deliver a message to the receiver. > > -- > DJIGZO email encryption ---
**Author:** ![\_UxBoD](https://avatars.discourse-cdn.com/v4/letter/_/eb9ed0/32.png) [@\_UxBoD](https://community.ciphermail.com/u/_UxBoD)\ **Post date:** [January 4, 2013, 12:29am UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/8 "2013-01-04T00:29:36Z")
If OTP could include pictures as-well then it would be an awesome tool! 馃檪 (am working on Zimbra as-well!;)) > **路路路** > > ----- Original Message ----- > From: "Martijn Brinkers" \ > To: users(a)lists.djigzo.com > Sent: Thursday, 3 January, 2013 10:34:39 PM > Subject: Re: Dzigzo with Email Client (roundcube) to access Gmail > > On 01/03/2013 11:25 PM, AG wrote: > > > Thanks for your reply. I got it working. I had to delete few lines in MTA > > Raw config. I've another query regarding pdf encryption using random password > > generation. Presently, there is an option to send the password to the sender. Is > > it possible to send it to the recipient also? My only concern is the additional > > step a sender has to take to deliver a message to the receiver. > > Although you might get this behaviour by modifying the config.xml file > (which contains all the mail handling rules), sending the password to > the recipient by email kind of defeats the purpose of encryption since > the email with the password will be sent by plain text. > > I suggest you try the One Time Password (OTP) mode first to see whether > that is an acceptable procedure. The OTP mode is in my view a good > trade-of between security and ease of use. > > Kind regards > > Martijn Brinkers > > -- > DJIGZO email encryption > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > Users mailing list > Users(a)lists.djigzo.com > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) ---
**Author:** ![bentscrewdriver](https://avatars.discourse-cdn.com/v4/letter/b/3da27b/32.png) [@bentscrewdriver](https://community.ciphermail.com/u/bentscrewdriver)\ **Post date:** [February 5, 2013, 4:32pm UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/9 "2013-02-05T16:32:33Z")
We had a pen test performed on our external facing hosts and the Djigzo appliance (2.4.0.3) had a finding where the internal IP address was disclosed by performing a HTTP 1.0 GET request (redirect response link show's IP rather than hostname). Do you have any guidance on how to set the response to return the hostname? Thanks > **路路路** > > On Thu, Jan 3, 2013 at 5:34 PM, Martijn Brinkers \ wrote: > > > On 01/03/2013 11:25 PM, AG wrote: > > \> Thanks for your reply. I got it working. I had to delete few lines in MTA > > \> Raw config. I've another query regarding pdf encryption using random > > password > > \> generation. Presently, there is an option to send the password to the > > sender. Is > > \> it possible to send it to the recipient also? My only concern is the > > additional > > \> step a sender has to take to deliver a message to the receiver. > > > > Although you might get this behaviour by modifying the config.xml file > > (which contains all the mail handling rules), sending the password to > > the recipient by email kind of defeats the purpose of encryption since > > the email with the password will be sent by plain text. > > > > I suggest you try the One Time Password (OTP) mode first to see whether > > that is an acceptable procedure. The OTP mode is in my view a good > > trade-of between security and ease of use. > > > > Kind regards > > > > Martijn Brinkers > > > > -- > > DJIGZO email encryption > > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > Users mailing list > > Users(a)lists.djigzo.com > > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [February 5, 2013, 5:27pm UTC](https://community.ciphermail.com/t/dzigzo-with-email-client-roundcube-to-access-gmail/334/10 "2013-02-05T17:27:01Z")
Hi, Can you send me some more information off-list? It's not yet clear for me what the exact problem is. Kind regards, Martijn > **路路路** > > On 02/05/2013 05:32 PM, bentscrewdriver wrote: > > > We had a pen test performed on our external facing hosts and the Djigzo > > appliance (2.4.0.3) had a finding where the internal IP address was > > disclosed by performing a HTTP 1.0 GET request (redirect response link > > show's IP rather than hostname). Do you have any guidance on how to set the > > response to return the hostname? > > > > Thanks > > > > On Thu, Jan 3, 2013 at 5:34 PM, Martijn Brinkers \ wrote: > > > > > On 01/03/2013 11:25 PM, AG wrote: > > > > > > > Thanks for your reply. I got it working. I had to delete few lines in MTA > > > > Raw config. I've another query regarding pdf encryption using random > > > > > > password > > > > > > > generation. Presently, there is an option to send the password to the > > > > > > sender. Is > > > > > > > it possible to send it to the recipient also? My only concern is the > > > > > > additional > > > > > > > step a sender has to take to deliver a message to the receiver. > > > > > > Although you might get this behaviour by modifying the config.xml file > > > (which contains all the mail handling rules), sending the password to > > > the recipient by email kind of defeats the purpose of encryption since > > > the email with the password will be sent by plain text. > > > > > > I suggest you try the One Time Password (OTP) mode first to see whether > > > that is an acceptable procedure. The OTP mode is in my view a good > > > trade-of between security and ease of use. > > > > > > Kind regards > > > > > > Martijn Brinkers > > > > > > -- > > > DJIGZO email encryption > > > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > > Users mailing list > > > Users(a)lists.djigzo.com > > > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) > > > > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > Users mailing list > > Users(a)lists.djigzo.com > > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) > > -- > DJIGZO email encryption