Can't access from mail clients, only web gui

DylanJCain

Here’s the logs for dovecot when i’m trying to connect.

Apr 11 09:48:43 3da86bc475a2 dovecot: lmtp(1162): Connect from 172.22.1.3
Apr 11 09:48:43 3da86bc475a2 dovecot: lmtp(1162): Disconnect from 172.22.1.3: Logged out (state=MAIL FROM)
Apr 11 09:48:43 3da86bc475a2 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.3, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
Apr 11 09:48:43 3da86bc475a2 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.3, lip=172.22.1.250
Apr 11 09:48:43 3da86bc475a2 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.3, lip=172.22.1.250

watchingthetrainsgoby

I’m very new at mailcow but…

Did your mail client ever work or is this the first setup
Are you sure you setup your imap authentication properly? What are your settings?

DylanJCain

watchingthetrainsgoby This is my first installation

watchingthetrainsgoby

Again stating I am very new to Mailcow, I would do the following.

Check your firewall rules on the server and make sure that the imap port 9993) is open inbound. Also check traffic is not blocked outbound.
Check you don’t have a firewall running on your mail client side. If so, allow 993 😉
Have you setup your mail client’s IMAP with authentication? That is user: email address, password: your mailbox password? Are you using port 993 (SSL)?

If you send more info on your setup, we might be able to help more.

Best of luck.

DylanJCain

watchingthetrainsgoby
Port 993 is open. Inbound checked and verified with telnet.
Yes i’ve set up the clients IMAP auth.

993 is the port i’m using

It’s probably worth noting that I’m using mailcow-dockerized

watchingthetrainsgoby

Clutching at straws here, but could it be that in your Mailcow UI, under mailboxes, that mailbox in question does not have IMAP as an Allowed protocols?

DylanJCain

watchingthetrainsgoby

I’m really lost as to why i can not get this working, it’s baffling.

If anyone has any ideas etc want’s to add me is discord to help me figure it out feel free, FiestyFrog#0437

watchingthetrainsgoby

Last thing I can think of is rather than just checking the port 933 is open, try and connect to it using openssl and see if the certificate is ok and if you can connect. This lin should help explain how to do that.

DylanJCain

After remove cloudflare proxy i now get this error. Apr 13 10:39:10 8646246420a4 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 (no auth attempts in 0 secs): user=<>, rip=172.22.1.1, lip=172.22.1.250, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 Apr 13 10:39:10 8646246420a4 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 (no auth attempts in 0 secs): user=<>, rip=172.22.1.1, lip=172.22.1.250, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 Apr 13 10:39:10 8646246420a4 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 (no auth attempts in 0 secs): user=<>, rip=172.22.1.1, lip=172.22.1.250, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 Apr 13 10:39:10 8646246420a4 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 (no auth attempts in 0 secs): user=<>, rip=172.22.1.1, lip=172.22.1.250, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48

I’m using certbot and nginx for the ssl on the host. and in the mailcow conf i have disabled the letsencrypt

watchingthetrainsgoby

what certificate do you get when you connect with openssl and does it have the correct certificate?

For me, I get
subject=/CN=mail.mydomain.com issuer=/C=US/O=Let's Encrypt/CN=R3

But I am not using a proxy.

DylanJCain

watchingthetrainsgoby Here’s openssl response

Which isn’t the cert that’s been provided on my host.

DylanJCain

Got it working, Changed SSL being used in my server block to the one that’s generated in /data/assets/ssl/domain