X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=3.8 required=5.0 tests=AWL,BAYES_40,FREEMAIL_FROM,KAM_THEBAT,KHOP_DNSBL_BUMP,KHOP_THREADED,MIME_BASE64_BLANKS,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L3,SPF_SOFTFAIL
X-Spam-Check-By:	sourceware.org
Date:	Mon, 25 Jun 2012 13:36:57 +0400
From:	Andrey Repin <anrdaemon AT freemail DOT ru>
Reply-To:	Andrey Repin <cygwin AT cygwin DOT com>
Message-ID:	<559738450.20120625133657@mtu-net.ru>
To:	=?ISO-8859-1?B?UmVu6SBCZXJiZXI=?= <r DOT berber AT computer DOT org>,
	cygwin AT cygwin DOT com
Subject:	Re: cygwin port forwarding
In-Reply-To:	<js81jv$fkk$1@dough.gmane.org>
References:	<1340468946 DOT 24539 DOT 26 DOT camel AT corn DOT betterworld DOT us> <1486292945 DOT 20120624040757 AT mtu-net DOT ru> <1340562793 DOT 24539 DOT 44 DOT camel AT corn DOT betterworld DOT us> <js81jv$fkk$1 AT dough DOT gmane DOT org>
MIME-Version:	1.0
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id q5P9oCon003200

Greetings, René Berber!

>> I ran netstat, I think in a non-cygwin terminal, and didn't see the
>> ports listed

> Then there is no tunnel.
^^^^^^^^^^^^^^^^^^^^^^^^^^
This.

> You probably used the wrong command instead of 'ssh -fNL ...'

>> For thunderbird, I pointed it at localhost and
>> the forwarded port, and was unable to connect.  One reason I asked is
>> that I have only middling confidence I  know what t-bird is actually
>> doing.

> TBird will have one minor problem: the server certificate.

> Since you are connecting to localhost and the server has its own name in 
> the certificate (if configured correctly), then you will be shown the 
> warning panel, and you will have to 'accept' to continue using that server.

>> On the other hand, inside a cygwin terminal I was able to use openssl to
>> connect via the same port on localhost.

> Meaning?

> Did you use "openssl s_client ..." or you mean something else.  That 
> test if for sending main, not reading, which seems to be what you wanted 
> to do.

openssl "s_client" command is for general TLS functionality check.
You can use it to connect to any TLS-enables service.
You can think about it as if it is telnet for TLS.

>> The target port is secure IMAP, 993.

> As long as TBird is configured (Server settings) with the correct port, 
> and "Security Settings" (SSL/TLS), there is no problem, it works.

> There are 2 separate configurations in TBird, one for reading, one for 
> sending (at the bottom of the "Account Settings" window: "Outgoing Server").


--
WBR,
Andrey Repin (anrdaemon AT freemail DOT ru) 25.06.2012, <13:34>

Sorry for my terrible english...

- Raw text -