Try this command first:

# iptables -I INPUT -p tcp --dport 4190 -j ACCEPT

Then test Open Xchange again. if it works, open /etc/default/iptables and add port 4190.

Yeah, it works. Found a small How To with Google.

It works! Just needed:

iptables -A INPUT -p tcp --dport 4190 -j ACCEPT
iptables -A INPUT -p tcp --sport 4190 -j ACCEPT

I can now use OX with iRedMail´s SIEVE filtering or create my own set of filters in side OX.

Thanks for your help and I hope this thread helps other users/customers to understand how to setup Open Xchange Groupware with iRedMail! :-)

Problem solved.

# iptables -I INPUT -p tcp --dport 4190 -j ACCEPT

Then test Open Xchange again. if it works, open /etc/default/iptables and add port 4190.

ventas wrote:

ACCEPT     tcp  --  anywhere             anywhere            multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,submission,ssmtp,ssh,zabbix-agent,zabbix-trapper

Sieve service port is not open in your iptables.

Ah OK. How can I do this, I´m not so experienced in using iptables...

ACCEPT     tcp  --  anywhere             anywhere            multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,submission,ssmtp,ssh,zabbix-agent,zabbix-trapper

Sieve service port is not open in your iptables.

Caused by: java.net.SocketTimeoutException: connect timed out

Looks like it cannot connect to SIEVE server at all.

- Is sieve service port (4190) open in iptables?
- Is sieve service only listening on 127.0.0.1?

root@vm-iredmail:/var/log# netstat -tupan| grep 4190
tcp        0      0 0.0.0.0:4190            0.0.0.0:*               LISTEN      10283/dovecot

root@vm-iredmail:/var/log# iptables --list
Chain INPUT (policy DROP)
target     prot opt source               destination         
fail2ban-postfix  tcp  --  anywhere             anywhere            multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,sieve
fail2ban-ssh  tcp  --  anywhere             anywhere            tcp dpt:ssh
fail2ban-dovecot  tcp  --  anywhere             anywhere            multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,sieve
fail2ban-roundcube  tcp  --  anywhere             anywhere            multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,sieve
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,submission,ssmtp,ssh,zabbix-agent,zabbix-trapper
ACCEPT     all  --  anywhere             anywhere           
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request

Chain FORWARD (policy DROP)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain fail2ban-dovecot (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere           

Chain fail2ban-postfix (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere           

Chain fail2ban-roundcube (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere           

Chain fail2ban-ssh (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere

Caused by: java.net.SocketTimeoutException: connect timed out

Looks like it cannot connect to SIEVE server at all.

- Is sieve service port (4190) open in iptables?
- Is sieve service only listening on 127.0.0.1?

# Specify which sieve server should be used. Two options are allowed here:
# user : use the imap server setting stored for user in the database
# global : use the sieve server given in this config file for all users
#SIEVE_LOGIN_TYPE=user
SIEVE_LOGIN_TYPE=global
# Specify which sieve credentials should be use. Two options are allowed here:
# "session" : login name and password are used from the current session
# "imapLogin" : the login name is taken from the field imapLogin of the current
#               user the password is taken from the current session
# "mail" : use the primary mail address of the user and the password from the
#          session
SIEVE_CREDSRC=session
#SIEVE_CREDSRC=mail
#SIEVE_CREDSRC=imapLogin
# to override the  sieve server defaults specify a value for the sieve server here
SIEVE_SERVER=1.78.143.246
#SIEVE_PORT=2000
SIEVE_PORT=4190
# If you want the script to be generated with another script name change it here.
# Note that the mail filter bundle will then leave the old script with the old
# script name behind, and doesn't delete it
#SCRIPT_NAME=Open-Xchange
#SCRIPT_NAME=roundcube.sieve
#SCRIPT_NAME=roundcube
SCRIPT_NAME=dovecot.sieve
# Define the charset encoding to use for authentication to sieve server
SIEVE_AUTH_ENC=UTF-8
# Define the regex which recognizes servers with incorrect sieve TLS implementation
NON_RFC_COMPLIANT_TLS_REGEX=^Cyrus.*v([0-1]\\.[0-9].*|2\\.[0-2].*|2\\.3\\.[0-9]|2\\.3\\.[0-9][^0-9].*)$
# Whether to use TLS if available
TLS=true
#TLS=false

08.01.2013 11:20:32 com.openexchange.log.internal.LoggerTask call
SCHWERWIEGEND: Logged at: com.openexchange.mailfilter.ajax.AJAXServlet.doGet(AJAXServlet.java:160)
MAIL_FILTER-0014 Category=8 Message=Error in low level connection to sieve server 1.78.143.246 at port 4190 exceptionID=228287586-7
com.openexchange.ajp13.remoteAddress=127.0.0.1
MAIL_FILTER-0014 Category=8 Message=Error in low level connection to sieve server 1.78.143.246 at port 4190 exceptionID=228287586-7
    at com.openexchange.mailfilter.ajax.actions.MailfilterAction.actionConfig(MailfilterAction.java:214)
    at com.openexchange.mailfilter.ajax.actions.MailfilterAction.actionConfig(MailfilterAction.java:110)
    at com.openexchange.mailfilter.ajax.actions.AbstractAction.action(AbstractAction.java:79)
    at com.openexchange.mailfilter.ajax.AJAXServlet.doGet(AJAXServlet.java:158)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
    at com.openexchange.ajp13.najp.AJPv13RequestHandlerImpl.doServletService(AJPv13RequestHandlerImpl.java:563)
    at com.openexchange.ajp13.AJPv13Request.response(AJPv13Request.java:138)
    at com.openexchange.ajp13.najp.AJPv13RequestHandlerImpl.createResponse(AJPv13RequestHandlerImpl.java:365)
    at com.openexchange.ajp13.najp.AJPv13ConnectionImpl.createResponse(AJPv13ConnectionImpl.java:224)
    at com.openexchange.ajp13.najp.AJPv13Task.call(AJPv13Task.java:394)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:269)
    at java.util.concurrent.FutureTask.run(FutureTask.java:123)
    at com.openexchange.threadpool.internal.CustomThreadPoolExecutor$Worker.runTask(CustomThreadPoolExecutor.java:781)
    at com.openexchange.threadpool.internal.CustomThreadPoolExecutor$Worker.run(CustomThreadPoolExecutor.java:807)
    at java.lang.Thread.run(Thread.java:595)
Caused by: java.net.SocketTimeoutException: connect timed out
    at java.net.PlainSocketImpl.socketConnect(Native Method)
    at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
    at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
    at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
    at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:367)
    at java.net.Socket.connect(Socket.java:524)
    at com.openexchange.jsieve.export.SieveHandler.initializeConnection(SieveHandler.java:237)
    at com.openexchange.mailfilter.ajax.actions.MailfilterAction.actionConfig(MailfilterAction.java:208)
    ... 15 more

ventas wrote:

MAIL_FILTER-0014 Category=8 Message=Error in low level connection to sieve server 1.78.143.246 at port 2000 exceptionID=1970102152-1519

Port 2000? Or 4190?

Yeah, that´s strange. I´ve changed the port to 4190 yesterday (see my comment) and OX still tries port 2000. I´ll have to check this first.

MAIL_FILTER-0014 Category=8 Message=Error in low level connection to sieve server 1.78.143.246 at port 2000 exceptionID=1970102152-1519

Port 2000? Or 4190?

==> open-xchange.log.0 <==
08.01.2013 09:08:27 com.openexchange.log.internal.LoggerTask call
SCHWERWIEGEND: Logged at: com.openexchange.mailfilter.ajax.AJAXServlet.doGet(AJAXServlet.java:160)
MAIL_FILTER-0014 Category=8 Message=Error in low level connection to sieve server 1.78.143.246 at port 2000 exceptionID=1970102152-1519
com.openexchange.ajp13.remoteAddress=127.0.0.1
MAIL_FILTER-0014 Category=8 Message=Error in low level connection to sieve server 1.78.143.246 at port 2000 exceptionID=1970102152-1519
    at com.openexchange.mailfilter.ajax.actions.MailfilterAction.actionConfig(MailfilterAction.java:214)
    at com.openexchange.mailfilter.ajax.actions.MailfilterAction.actionConfig(MailfilterAction.java:110)

Jan 07 11:09:56 IMAP(xxx@company.de): Info: acl vfile: file /var/vmail/vmail1/company.de/x/x/x/xxx-2011.11.14.21.37.25//Maildir/dovecot-acl not found

This and all that above comes when opening the filter page in the mail settings inside Open Exchange.