unable to login via pop3 email client

[Happy]

I am using Ubuntu - Here is my problem or at least one of them

1. I am unable to login with a pop3 client-however I can generate a test email (using outlook to test connection.but account never logs into server). I can only see the email on the server and not the pop3 client.
2. I can send mail to a user from any pop3 client, but the mail gets stuck on the server and never gets to the intended pop3 client
3. I can send mail from the server to anyone

Again I am unable to use a pop3 client to send/receive mail -this issue seems to be unable to login to server with id/password

I am using Postfix -Do I also need SendMail as well ?

Confused ?

Thanks for any and all help

Happy

[falko]

Originally Posted by Happy

I am using Postfix -Do I also need SendMail as well ?

No, either Postfix (which I prefer because it's a lot easier to configure) or Sendmail, but not both.

Any errors in your mail log? What are the output of

netstat -tap

and

postconf -n

?

[Happy]

netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:mysql *:* LISTEN 3745/mysqld
tcp 0 0 *:10000 *:* LISTEN 4056/perl
tcp 0 0 mail.the12345.n:domain *:* LISTEN 3542/named
tcp 0 0 localhost.locald:domain *:* LISTEN 3542/named
tcp 0 0 *:smtp *:* LISTEN 9278/master
tcp 0 0 localhost.localdoma:953 *:* LISTEN 3542/named
tcp6 0 0 *:imaps *:* LISTEN 3619/couriertcpd
tcp6 0 0 *op3s *:* LISTEN 3654/couriertcpd
tcp6 0 0 *op3 *:* LISTEN 3634/couriertcpd
tcp6 0 0 *:imap2 *:* LISTEN 3594/couriertcpd
tcp6 0 0 *:www *:* LISTEN 4033/apache2
tcp6 0 0 *:ftp *:* LISTEN 3989/proftpd: (acce
tcp6 0 0 *:ssh *:* LISTEN 3914/sshd
tcp6 0 0 *:smtp *:* LISTEN 9278/master
tcp6 0 0 ip6-localhost:953 *:* LISTEN 3542/named
tcp6 0 0 *:https *:* LISTEN 4033/apache2
tcp6 0 1928 mail.12345.net:ssh CPE-75-81-8-102.kc:4981
ESTABLISHED14879/0

postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_protocols = all
mailbox_command = procmail -a $EXTENSION
mailbox_size_limit = 0
mydestination = the12345.net, mail.the12345.net, localhost.the12345.net, , localhost
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject _unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom

I saw some errors last night in the logs saying fatal errors on sending-they are no longer there now.

I can also telnet
telnet localhost pop3
server1:/etc/postfix# telnet localhost pop3
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
+OK Hello there.
quit
+OK Better luck next time.
Connection closed by foreign host.

[falko]

You must configure Postfix to use Maildir instead of mbox because Courier uses Maildir:

postconf -e 'home_mailbox = Maildir/'
postconf -e 'mailbox_command ='
/etc/init.d/postfix restart

[Happy]

ok I ran the following command


postconf -e 'home_mailbox = Maildir/'
postconf -e 'mailbox_command ='
/etc/init.d/postfix restart

I then tried logging into the server with a pop3 account (Outlook) using both the server IP address and the server name for the incoming server-which I have a public record for-still unable to connect with pop3 clinet
Here are the logs I took from the mail logs :
mail log
Jul 9 21:13:45 mail courierpop3login: Connection, ip=[::ffff:75.81.8.102]


Mail -warn
Jul 9 14:52:18 mail postfix/smtpd[12722]: warning: TLS library problem: 12722:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125:
Jul 9 14:52:18 mail postfix/smtpd[12722]: warning: TLS library problem: 12722:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:274:
Jul 9 19:01:37 mail postfix/smtpd[12993]: warning: TLS library problem: 12993:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('/etc/postfix/ssl/cacert.pem','r'):
Jul 9 19:01:37 mail postfix/smtpd[12993]: warning: TLS library problem: 12993:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125:
Jul 9 19:01:37 mail postfix/smtpd[12993]: warning: TLS library problem: 12993:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:274:
Jul 9 20:39:47 mail postfix/postqueue[13294]: warning: Mail system is down -- accessing queue directly
Jul 9 20:40:00 mail postfix/postqueue[13364]: warning: Mail system is down -- accessing queue directly
Am I missing something or is the system so jacked up I need to reload OS and PostFix

Thanks
Happy

[falko]

Can you post the outputs of

postconf -n

and

netstat -tap

?

[Happy]

postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
home_mailbox = Maildir/
inet_protocols = all
mailbox_command =
mailbox_size_limit = 0
mydestination = 123456.net, mail.123456.net, localhost.123456.net, , localhost
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject _unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom


netstat -tap

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:mysql *:* LISTEN 3766/mysqld
tcp 0 0 *:10000 *:* LISTEN 4079/perl
tcp 0 0 mail.123456.n:domain *:* LISTEN 3563/named
tcp 0 0 localhost.locald:domain *:* LISTEN 3563/named
tcp 0 0 *:smtp *:* LISTEN 3908/master
tcp 0 0 localhost.localdoma:953 *:* LISTEN 3563/named
tcp6 0 0 *:imaps *:* LISTEN 3640/couriertcpd
tcp6 0 0 *op3s *:* LISTEN 3675/couriertcpd
tcp6 0 0 *op3 *:* LISTEN 3655/couriertcpd
tcp6 0 0 *:imap2 *:* LISTEN 3615/couriertcpd
tcp6 0 0 *:www *:* LISTEN 4056/apache2
tcp6 0 0 *:ftp *:* LISTEN 4012/proftpd: (acce
tcp6 0 0 *:ssh *:* LISTEN 3937/sshd
tcp6 0 0 *:smtp *:* LISTEN 3908/master
tcp6 0 0 ip6-localhost:953 *:* LISTEN 3563/named
tcp6 0 0 *:https *:* LISTEN 4056/apache2
tcp6 0 1928 mail.12345.net:ssh CPE-75-81-8-102.kc:2943 ESTABLISHED4849/0

[falko]

If you don't need TLS, comment out this part in /etc/postfix/main.cf and restart Postfix:

smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:mysql *:* LISTEN 3766/mysqld
tcp 0 0 *:10000 *:* LISTEN 4079/perl
tcp 0 0 mail.123456.n:domain *:* LISTEN 3563/named
tcp 0 0 localhost.locald:domain *:* LISTEN 3563/named
tcp 0 0 *:smtp *:* LISTEN 3908/master
tcp 0 0 localhost.localdoma:953 *:* LISTEN 3563/named
tcp6 0 0 *:imaps *:* LISTEN 3640/couriertcpd
tcp6 0 0 *op3s *:* LISTEN 3675/couriertcpd
tcp6 0 0 *op3 *:* LISTEN 3655/couriertcpd
tcp6 0 0 *:imap2 *:* LISTEN 3615/couriertcpd
tcp6 0 0 *:www *:* LISTEN 4056/apache2
tcp6 0 0 *:ftp *:* LISTEN 4012/proftpd: (acce
tcp6 0 0 *:ssh *:* LISTEN 3937/sshd
tcp6 0 0 *:smtp *:* LISTEN 3908/master
tcp6 0 0 ip6-localhost:953 *:* LISTEN 3563/named
tcp6 0 0 *:https *:* LISTEN 4056/apache2
tcp6 0 1928 mail.12345.net:ssh CPE-75-81-8-102.kc:2943 ESTABLISHED4849/0

Courier is working ok, so you should be able to log in with POP3. Please make sure that no firewall is blocking port 110.

[Happy]

I commented out the TLS items as suggested and still unable to login to server via pop3-Any other suggestions before I reload OS and just postfix?

Thanks

Happy

[falko]

Originally Posted by Happy

I commented out the TLS items as suggested and still unable to login to server via pop3

You're mixing up SMTP and POP3. POP3 is for fetching emails, this is handled by Courier in your case. SMTP is for sending emails, this is handled by Postfix. Postfix had certificate errors in the mail log, that's why I told you to comment out the TLS stuff. So the SMTP part should be ok now.

Regarding POP3:
What's the output of

iptables -L

?