Secure Pop3 Email Clients and Orion

• Eudora.
• Netscape Communicator / Web Browser.
• Microsoft Outlook Express (part of Internet Explorer ["IE"]).

Please note that POP3 service on Orion is NOT supported, and is only provided for use by advanced, self-supporting users. Any users requiring assistance are strongly encouraged to use a TELNET or SSH client to access the PINE mail client on Orion, or else to use GroupWise or the Student Email System (as applicable).

POP3 Security Issues

As you are aware, computer security is an ongoing concern at Loyola and in the Internet world at large. A major area of concern involves the theft of unencrypted passwords & login id's passed openly to Orion multiple times from POP3 clients, in connecting to Orion and (re)checking for new mail. These can be used by "hackers" to gain unauthorized access to Orion and possibly cause malicious damage to Loyola's or someone else's servers or data, or even bring down Orion itself. For this reason, Orion administration REQUIRES the use of a SECURE connection method by POP3 clients. Information about how to secure POP3 is found below.

NOTE: POP3 security only affects the receipt of inbound e-mail. Outbound/"SMTP gateway" e-mail settings are not involved here, and should not be modified.

Configuration settings for POP3 Email Clients

General Settings:

To access your Orion mail with a POP3 client, configure the client with the following specifications:

• orion.it.luc.edu is your "Inbound Mail," "INBOX server," or "Incoming E-mail server".
• mail.luc.edu is your "Outbound Mail," "SMTP gateway," or "Outgoing E-mail server".
• Your Loyola Computer ID is your username.
• The client should check for new e-mail every 10 (or more) minutes.

Note: If you do not connect to the Internet through Loyola, your "Outbound Mail" or "Outgoing E-mail server" specification will NOT be mail.luc.edu. Check with your Internet service provider for the correct specification.

Tips:

Here are some things to look at when re-entering the setup information for incoming mail:

• NOTE: Settings from an earlier, working version of a client may not be saved/copied in the installation of an updated version. This can result in a "connection refused" message when you try to connect to Orion. Write down existing settings BEFORE you update the client, and check them after the update is finished.
• Double-check the spelling of all settings.
• Check that the separator character in server names (e.g. "orion.it.luc.edu") is ".", not ",".

• Eudora.
• Netscape Communicator / Web Browser.
• MS Outlook Express in Internet Explorer (including any Service Pack(s)). NOTE: Outlook Express is often used to spread computer viruses. For this reason, its use is NOT RECOMMENDED.

Enable a secure POP3 connection:

Change the program settings to enable a SECURE POP3 connection. NOTE: The needed POP3 changes apply to incoming mail only, NOT the outgoing, SMTP settings.

• Setting the Eudora 5.2 client:
• Setting the Netscape Communicator 7.0 client:
• Setting the MS Outlook Express [in IE6] client:

If you are not using one of the above POP3 mail clients (any version) and need assistance, please contact the software vendor directly.

An Alternative Email Client -- PINE:

If you have difficulty in implementing a secure POP3 client on your PC, please keep in mind that PINE, an text email reader, remains available on Orion as an alternative to using a POP3 client--in fact, PINE is the supported email client for Orion. Instructions for using PINE on Orion are available here . A link to the PINE homepage can be found in the Resources section, below.

Background information on secure POP3 connections is available here.

Resources:

• Eudora's download page.
• Netscape's download page.
• MS Outlook Express's download page.
• Instructions for using PINE on Orion
• The homepage of PINE.

If you have any questions, comments or suggestions regarding this document (or any other issue related to Orion), feel free to contact us via email at admin@orion.luc.edu.