Cannot configure external mail client

[luchtbakker]

Hello Hestia members,

First of all, thank you for admitting me. This is my first topic, and I hope I’m doing it right.

Yesterday, I did a clean default installation, only with MySQL 8 added. However, I’m unable to configure an external email client for a domain in any way. Examples include Apple Mail or Outlook on Windows. In both cases, even with manual configuration, I can’t get it set up.

In dovecot, this is the log:

*outlook

Jan 14 10:01:32 pop3-login: Info: Disconnected: Connection closed: read(size=650) failed: Connection reset by peer (no auth attempts in 3 secs): user=<>, rip=52.125.140.13, lip=194.163.161.200, TLS: read(size=650) failed: Connection reset by peer, session=<Wi/BJOQOyBM0fYwN>
Jan 14 10:01:32 imap-login: Info: Disconnected: Connection closed: read(size=1014) failed: Connection reset by peer (no auth attempts in 3 secs): user=<>, rip=52.125.140.13, lip=194.163.161.200, TLS handshaking: read(size=1014) failed: Connection reset by peer, session=<lTTBJOQO0RM0fYwN>
Jan 14 10:01:35 auth: Info: missing passwd file: /etc/exim4/domains/myrisdns.eu/passwd
Jan 14 10:01:35 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=52.97.202.237, lip=194.163.161.200, session=<mjb4JOQOILU0Ycrt>
Jan 14 10:01:37 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=52.97.202.237, lip=194.163.161.200, session=<epsYJeQOkec0Ycrt>
Jan 14 10:01:42 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=52.97.202.237, lip=194.163.161.200, session=<GmpXJeQOi3E0Ycrt>

*Apple mail

Jan 14 10:07:36 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000416:SSL routines::sslv3 alert certificate unknown: SSL alert number 46 (no auth attempts in 0 secs): user=<>, rip=84.83.79.12, lip=194.163.161.200, TLS handshaking: SSL_accept() failed: error:0A000416:SSL routines::sslv3 alert certificate unknown: SSL alert number 46, session=<1x1+OuQOt/FUU08M>
Jan 14 10:08:24 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=84.83.79.12, lip=194.163.161.200, mpid=598955, session=<vDFMPeQOufFUU08M>
Jan 14 10:08:24 imap([email protected])<598955><vDFMPeQOufFUU08M>: Info: Disconnected: Connection closed (ID finished 0.022 secs ago) in=88 out=488 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0

Webmail and all related functionalities are working fine.

I hope you can assist me further!

[sahsanu]

Hi @luchtbakker,

@luchtbakker

First of all, thank you for admitting me. This is my first topic, and I hope I’m doing it right.

You said hello, you started with a thank you, you added logs and the most important thing, you didn’t add screenshots to show the logs and used the preformatted text… I would say you started very well

Regarding your issue, you must add a trusted certificate to your mail domain, so, edit your mail domain and select Enable SSL for this domain -> Use Let's Encrypt to obtain SSL certificate and click Save and in a few minutes you will get the certificate.

Once done, try to connect again from your email client.

[luchtbakker]

Hi Sahsanu.

I thought that if I added the SSL certificate to the domain, it was automatically a wildcard. I have now added the SSL to the email and it now has a let’s encrypt certificate, but I still get the same problem when adding it in Outlook, for example.

When i add manual IMAP (with SSL and mail.domain.com) :

The login details are correct, it’s tested in the webmail.

Dovecot log:

Jan 14 12:10:39 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=52.97.202.237, lip=194.163.161.200, session=<ycyK8uUOpr40Ycrt>
Jan 14 12:10:41 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=52.97.202.237, lip=194.163.161.200, session=<bbGq8uUOHQY0Ycrt>
Jan 14 12:10:45 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=52.97.202.237, lip=194.163.161.200, session=<Fpfp8uUORWw0Ycrt>
Jan 14 12:10:50 pop3-login: Info: Disconnected: Connection closed: read(size=650) failed: Connection reset by peer (no auth attempts in 17 secs): user=<>, rip=52.125.141.21, lip=194.163.161.200, TLS: read(size=650) failed: Connection reset by peer, session=<sII28+UOmRo0fY0V>
Jan 14 12:11:09 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636305, secured, session=<94NR9OUONs0AAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:11:09 imap([email protected])<636305><94NR9OUONs0AAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=185 out=900 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:11:09 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636307, secured, session=<It9S9OUOOM0AAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:11:09 imap([email protected])<636307><It9S9OUOOM0AAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=212 out=813 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:11:09 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636310, secured, session=<YrlW9OUOPs0AAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:11:09 imap([email protected])<636310><YrlW9OUOPs0AAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=295 out=692 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:11:10 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636314, secured, session=<xwNc9OUOTM0AAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:11:10 imap([email protected])<636314><xwNc9OUOTM0AAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=437 out=1311 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:12:10 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636345, secured, session=<dcj59+UOsIEAAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:12:10 imap([email protected])<636345><dcj59+UOsIEAAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=168 out=651 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:13:10 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636553, secured, session=<j2WM++UO0KUAAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:13:10 imap([email protected])<636553><j2WM++UO0KUAAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=168 out=651 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:13:51 auth: Info: missing passwd file: /etc/exim4/domains/myrisdns.eu/passwd
Jan 14 12:13:56 auth: Info: missing passwd file: /etc/exim4/domains/myrisdns.eu/passwd
Jan 14 12:14:10 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=636586, secured, session=<5Lsf/+UOQsoAAAAAAAAAAAAAAAAAAAAB>
Jan 14 12:14:10 imap([email protected])<636586><5Lsf/+UOQsoAAAAAAAAAAAAAAAAAAAAB>: Info: Disconnected: Logged out in=168 out=651 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Jan 14 12:14:33 auth: Info: missing passwd file: /etc/exim4/domains/myrisdns.eu/passwd
Jan 14 12:14:36 auth: Info: missing passwd file: /etc/exim4/domains/myrisdns.eu/passwd

I don’t know where to look now.

[sahsanu]

I’ve checked it and you are now serving the right certificate for your domain.

Double check that you are using the right data:

User: [email protected]
Pass: whatever
Server IMAP: mail.myris.eu
Port IMAP: 993
Connection: SSL/TLS
Server SMTP: mail.myris.eu
Port SMTP: 465
Connection: SSL/TLS

As you are trying to connect and failing, maybe fail2ban is banning your ip.

Use this command as root to check it:

v-list-firewall-ban

If your ip is listed, you can remove it with this command:

v-delete-firewall-ban THE_BANNED_IP CHAIN

You will see the CHAIN in previous list command and it should be MAIL or RECIDIVE so, as example:

v-delete-firewall-ban 203.0.113.1 MAIL

You could also try another mail client like Thunderbird to check whether you have the same errors.

And also you could create a temporal mail user and send me (via private message) the details so I can check it from my side (but I’ll leave in 45 minutes and will be back tonight).

[luchtbakker]

Hi!

I have indeed used the above data before, but without success. I also don’t appear in the fail2ban. (list/firewall/banlist/)

I have just used Blue Mail as an alternative to Apple mail and Outlook and it works immediately and automatically. Very strange. Because even manual does not work with Outlook and Apple mail. At Apple it even gets stuck on: Verify. Both with and without SSL.

Since Outlook and Apple mail are very common mail services, I hope we can get that working.

I have just sent you the details of a test email. Thank you in advance for your help!

EDIT: Blue mail adds only unsecure connection. SSL connection not worked.

[sahsanu]

As I wrote a few minutes ago in the private message. I tested it with Maildroid in Android, Outlook 2016 in Windows and Evolution in Linux and in all of them it works very well using SSL/TLS.

[luchtbakker]

Hey.

Thank you for testing! I tested again with other apps, and the behavior is different but good.

Outlook 2021 (Windows) - automatic and works well
Outlook (Windows app store) - does not work, not even with SSL

Apple mail - Works now, after completing it manually
Outlook iOS - automatic works well.

No idea what the difference is with this morning. I also no longer see SSL errors in Dovecot. Maybe it will take a while for these to be refreshed?

I’m happy so far, so thank you so much for all your help!

[Chrisgayle]

Hello @sahsanu sir,
If you remember I face the same problem few months ago
After panel update, mail can’t connect to third-party email apps

I mentioned it again in here because that time I also use bluemail app and it work that time also same like @luchtbakker but not the other Android app like outlook and Gmail. I noticed that it only happen in Android outlook app not in desktop/pc. I think it will stay like this but when new update given in playstore of Gmail and outlook it started work again, I am able to add my mail account (generated in Hestia) in this Android app again.

I don’t know am i right or not, but I think this problem arise because of some Android OS problem not because of hestiacp. Because it started working again after update given by playstore, also my mail work fine in PC in all other mail client fine during that time.

I suggest @luchtbakker sir if possible try again to add account in your Android mail app again after new update given in play store (app store in case of apple).