X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=3.8 required=5.0	tests=AWL,BAYES_40,FREEMAIL_FROM,KAM_THEBAT,KHOP_DNSBL_BUMP,KHOP_THREADED,MIME_BASE64_BLANKS,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L3,SPF_SOFTFAIL
X-Spam-Check-By: sourceware.org
Date: Mon, 25 Jun 2012 13:36:57 +0400
From: Andrey Repin <anrdaemon AT freemail DOT ru>
Reply-To: Andrey Repin <cygwin AT cygwin DOT com>
Message-ID: <559738450.20120625133657@mtu-net.ru>
To: =?ISO-8859-1?B?UmVu6SBCZXJiZXI=?= <r DOT berber AT computer DOT org>,
        cygwin AT cygwin DOT com
Subject: Re: cygwin port forwarding
In-Reply-To: <js81jv$fkk$1@dough.gmane.org>
References: <1340468946 DOT 24539 DOT 26 DOT camel AT corn DOT betterworld DOT us> <1486292945 DOT 20120624040757 AT mtu-net DOT ru> <1340562793 DOT 24539 DOT 44 DOT camel AT corn DOT betterworld DOT us> <js81jv$fkk$1 AT dough DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id q5P9oCon003200

Greetings, René Berber!

>> I ran netstat, I think in a non-cygwin terminal, and didn't see the
>> ports listed

> Then there is no tunnel.
^^^^^^^^^^^^^^^^^^^^^^^^^^
This.

> You probably used the wrong command instead of 'ssh -fNL ...'

>> For thunderbird, I pointed it at localhost and
>> the forwarded port, and was unable to connect.  One reason I asked is
>> that I have only middling confidence I  know what t-bird is actually
>> doing.

> TBird will have one minor problem: the server certificate.

> Since you are connecting to localhost and the server has its own name in 
> the certificate (if configured correctly), then you will be shown the 
> warning panel, and you will have to 'accept' to continue using that server.

>> On the other hand, inside a cygwin terminal I was able to use openssl to
>> connect via the same port on localhost.

> Meaning?

> Did you use "openssl s_client ..." or you mean something else.  That 
> test if for sending main, not reading, which seems to be what you wanted 
> to do.

openssl "s_client" command is for general TLS functionality check.
You can use it to connect to any TLS-enables service.
You can think about it as if it is telnet for TLS.

>> The target port is secure IMAP, 993.

> As long as TBird is configured (Server settings) with the correct port, 
> and "Security Settings" (SSL/TLS), there is no problem, it works.

> There are 2 separate configurations in TBird, one for reading, one for 
> sending (at the bottom of the "Account Settings" window: "Outgoing Server").


--
WBR,
Andrey Repin (anrdaemon AT freemail DOT ru) 25.06.2012, <13:34>

Sorry for my terrible english...