Hello everyone since yesterday I also set up mailcow mail server. But I have some problem with atoconfiguration which I can't solve. Before I start I already tell you: - the certificates are all valid - credentials are working (tried on webmail) here is the problem: thunderbird: - it works but it tells me it takes configuration from microsoft exchange even though it doesn't (but whatever) - outlook doesn't specify me the error but it just doesn't work i leave below the conectivity analyzer log - mail (apple) can't find configurationo so it asks me for server data. ` ` And every time I give up and the next hour I try again something has changed again when I autocinfig in the services

@"esackbauer"#p12805 Ok thanks. I just found someone that is trying a solution for a reversproxy. Mi server are currently this way: x.x.x.1 -> router x.x.x.2 -> mx server x.x.x.3 -> web server the mailcow dashboard is running on x.x.x.2 so i use 2 reverse proxy 1. for mx-admin.domain.com that points to x.x.x.2 2. and the second autodiscover & mail that still point to x.x.x.2 idk but maiby there is a problem or I need to configure nginx in a different way by using revers proxy

Autodiscover configuration strange errors

ilBiondojs

Hello everyone since yesterday I also set up mailcow mail server. But I have some problem with atoconfiguration which I can’t solve. Before I start I already tell you:

the certificates are all valid
credentials are working (tried on webmail)

here is the problem:
thunderbird:

it works but it tells me it takes configuration from microsoft exchange even though it doesn’t (but whatever)
outlook doesn’t specify me the error but it just doesn’t work i leave below the conectivity analyzer log
mail (apple) can’t find configurationo so it asks me for server data.
<?xml version="1.0" encoding="utf-8"?> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Testing Outlook connectivity." resultdescription="The Outlook connectivity test failed." additionaldetails="" elapsedMilliseconds="11657"> <children> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to test Autodiscover for timo.coupek@jawsdevelopers.ch." resultdescription="Testing Autodiscover failed." additionaldetails="" elapsedMilliseconds="11657"> <children> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting each method of contacting the Autodiscover service." resultdescription="The Autodiscover service couldn't be contacted successfully by any method." additionaldetails="" elapsedMilliseconds="11657"> <children> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://autodiscover-s.outlook.com:443/Autodiscover/Autodiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="1209"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover-s.outlook.com in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 52.96.182.146, 52.96.119.162, 52.96.230.2, 52.96.17.2, 2603:1036:301:203c::2, 2603:1036:301:300f::2, 2603:1036:301:2120::2, 2603:1036:301:21b8::2" elapsedMilliseconds="45"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 443 on host autodiscover-s.outlook.com to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="8"> <children /> </testresult> <testresult status="Success" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Testing the SSL certificate to make sure it's valid." resultdescription="The certificate passed all validation requirements." additionaldetails="" elapsedMilliseconds="53"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover-s.outlook.com on port 443." resultdescription="The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate." additionaldetails="Remote certificate information:
Subject: CN=outlook.com, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer: CN=DigiCert Cloud Services CA-1, O=DigiCert Inc, C=US
Thumbprint: 3618F1AE4C1B9AB443F16E8231488181E32E4509
Not valid before: 2023-10-31 00:00:00Z
Expires: 2024-10-30 23:59:59Z"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Validating the certificate name." resultdescription="The certificate name was validated successfully." additionaldetails="Host name autodiscover-s.outlook.com was found in the Certificate Subject Alternative Name entry."> <children /> </testresult> <testresult status="Success" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Certificate trust is being validated." resultdescription="The certificate is trusted and all certificates are present in the chain." additionaldetails=""> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=outlook.com, O=Microsoft Corporation, L=Redmond, S=Washington, C=US." resultdescription="One or more certificate chains were constructed successfully." additionaldetails="A total of 2 chains were built. The highest quality chain ends in root certificate CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US."> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Analyzing the certificate chains for compatibility problems with versions of Windows." resultdescription="No Windows compatibility problems were identified." additionaldetails="The certificate chain has been validated up to a trusted root. Root = CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US."> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing the certificate date to confirm the certificate is valid." resultdescription="Date validation passed. The certificate hasn't expired." additionaldetails="The certificate is valid. NotBefore = 10/31/2023 12:00:00 AM, NotAfter = 10/30/2024 11:59:59 PM"> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Checking the IIS configuration for client certificate authentication." resultdescription="Client certificate authentication wasn't detected." additionaldetails="Accept/Require Client Certificates isn't configured." elapsedMilliseconds="42"> <children /> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to send an Autodiscover POST request to potential Autodiscover URLs." resultdescription="Autodiscover settings weren't obtained when the Autodiscover POST request was sent." additionaldetails="" elapsedMilliseconds="1054"> <children> <testresult status="Error" errorid="98abd5e5-0c80-4de3-b65c-49fbc120abf9" contentUrl="https://docs.microsoft.com/exchange/clients-and-mobile-in-exchange-online/disable-basic-authentication-in-exchange-online" testdescription="The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover-s.outlook.com:443/Autodiscover/Autodiscover.xml for user timo.coupek@jawsdevelopers.ch." resultdescription="The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response." additionaldetails="An HTTP 401 Unauthorized response was received from the remote Unknown server. Basic Authentication is blocked. Please check to ensure you're using Modern Authentication to run the test.
HTTP Response Headers:
request-id: 0a35db34-93df-bb7b-4212-72ee0e352783
Alt-Svc: h3=":443",h3-29=":443"
X-CalculatedFETarget: GV0P278CU001.internal.outlook.com
X-BackEndHttpStatus: 401
X-BackEndHttpStatus: 401
X-CalculatedBETarget: GV0P278MB0995.CHEP278.PROD.OUTLOOK.COM
X-RUM-Validated: 1
X-RUM-NotUpdateQueriedPath: 1
X-RUM-NotUpdateQueriedDbCopy: 1
X-AutoDiscovery-Error: LiveIdBasicAuth:BasicAuthBlocked:<UNH:<PII.Email:Huq5ubvELLTKOBLvOf45yjyDtJdHw4gaPp1Q4qWqPnE=@jawsdevelopers.ch>><RequestId=d4463fae-a5ea-49e8-ab27-b75b533ababa,ST=22:53:12><UIPH:<PII.IP:aU/9Mm6Oy7mcCIl2kWkA43wQoeRe2WNIcRrp/8UOlNo=>><BG<UserType:ManagedBusiness><LogonFailed-BasicAuthBlocked><AS:BasicAuthBlocked><Tid=00da9406-c5a0-4484-8d88-943c85be3433><V1;
X-DiagInfo: GV0P278MB0995
X-BEServer: GV0P278MB0995
X-Proxy-RoutingCorrectness: 1
X-Proxy-BackendServerStatus: 401
X-FEProxyInfo: DS7PR03CA0133.NAMPRD03.PROD.OUTLOOK.COM
X-FEEFZInfo: DSM
X-FEServer: GV0P278CA0008
X-FEServer: DS7PR03CA0133
X-FirstHopCafeEFZ: DSM
Content-Length: 0
Cache-Control: private
Date: Wed, 24 Jan 2024 11:22:56 GMT
Server: Microsoft-IIS/10.0
WWW-Authenticate: Basic Realm=""
X-AspNet-Version: 4.0.30319
" elapsedMilliseconds="1053"> <children /> </testresult> </children> </testresult> </children> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://jawsdevelopers.ch:443/Autodiscover/Autodiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="3353"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name jawsdevelopers.ch in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 213.193.78.34" elapsedMilliseconds="27"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 443 on host jawsdevelopers.ch to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="144"> <children /> </testresult> <testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Testing the SSL certificate to make sure it's valid." resultdescription="The certificate passed all validation requirements." additionaldetails="" elapsedMilliseconds="2017"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is probing the TCP endpoint 213.193.78.34 on port 443 to detect which SSL/TLS protocols and cipher suites are enabled." resultdescription="We were able to detect the enabled protocols and cipher suites." additionaldetails="TLS Protocol: SSL v3, Not enabled.
TLS Protocol: TLS 1.0, Not enabled.
TLS Protocol: TLS 1.1, Not enabled.
TLS Protocol: TLS 1.2, Enabled cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"> <children /> </testresult> <testresult status="Warning" errorid="8fa9e3b3-fd10-4c0a-9faf-3ab517a252c9" contentUrl="https://docs.microsoft.com/microsoft-365/compliance/technical-reference-details-about-encryption" testdescription="Checking that your server supports modern TLS protocols and cipher suites." resultdescription="The test passed with some warnings encountered. Please expand the additional details." additionaldetails="Your server only supports 2 cipher suites compatible with Microsoft 365 services. You may want to enable additional cipher suites for enhanced compatibility.
Enabled cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server jawsdevelopers.ch on port 443." resultdescription="The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate." additionaldetails="Remote certificate information:
Subject: CN=jawsdevelopers.ch
Issuer: CN=ZeroSSL RSA Domain Secure Site CA, O=ZeroSSL, C=AT
Thumbprint: 80630A7B1028F51D9D4B8C98EE7C7E5AE3020303
Not valid before: 2024-01-16 00:00:00Z
Expires: 2024-04-15 23:59:59Z"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Validating the certificate name." resultdescription="The certificate name was validated successfully." additionaldetails="Host name jawsdevelopers.ch was found in the Certificate Subject Common name."> <children /> </testresult> <testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Certificate trust is being validated." resultdescription="The certificate is trusted and all certificates are present in the chain." additionaldetails=""> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=jawsdevelopers.ch." resultdescription="One or more certificate chains were constructed successfully." additionaldetails="A total of 1 chains were built. The highest quality chain ends in root certificate CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US."> <children /> </testresult> <testresult status="Warning" errorid="1339c33a-8f21-427b-a323-4cee1a13f517" contentUrl="" testdescription="Analyzing the certificate chains for compatibility problems with versions of Windows." resultdescription="The test passed with some warnings encountered. Please expand the additional details." additionaldetails="The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled."> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing the certificate date to confirm the certificate is valid." resultdescription="Date validation passed. The certificate hasn't expired." additionaldetails="The certificate is valid. NotBefore = 1/16/2024 12:00:00 AM, NotAfter = 4/15/2024 11:59:59 PM"> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Checking the IIS configuration for client certificate authentication." resultdescription="Client certificate authentication wasn't detected." additionaldetails="Accept/Require Client Certificates isn't configured." elapsedMilliseconds="580"> <children /> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to send an Autodiscover POST request to potential Autodiscover URLs." resultdescription="Autodiscover settings weren't obtained when the Autodiscover POST request was sent." additionaldetails="" elapsedMilliseconds="583"> <children> <testresult status="Error" errorid="12f4b21a-7e8d-4c95-b4a8-f4608e7d73b0" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://jawsdevelopers.ch:443/Autodiscover/Autodiscover.xml for user timo.coupek@jawsdevelopers.ch." resultdescription="The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response." additionaldetails="A Web exception occurred because an HTTP 404 - 404 response was received from Unknown.
HTTP Response Headers:
Connection: keep-alive
Keep-Alive: timeout=20
Accept-Ranges: bytes
Content-Length: 3212
Content-Type: text/html
Date: Wed, 24 Jan 2024 11:23:00 GMT
ETag: "c8c-5dc807840f1c0;60fac7afee299
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
" elapsedMilliseconds="583"> <children /> </testresult> </children> </testresult> </children> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://autodiscover.jawsdevelopers.ch:443/Autodiscover/Autodiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="3568"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover.jawsdevelopers.ch in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 213.193.78.34" elapsedMilliseconds="24"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 443 on host autodiscover.jawsdevelopers.ch to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="146"> <children /> </testresult> <testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Testing the SSL certificate to make sure it's valid." resultdescription="The certificate passed all validation requirements." additionaldetails="" elapsedMilliseconds="1840"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is probing the TCP endpoint 213.193.78.34 on port 443 to detect which SSL/TLS protocols and cipher suites are enabled." resultdescription="We were able to detect the enabled protocols and cipher suites." additionaldetails="TLS Protocol: SSL v3, Not enabled.
TLS Protocol: TLS 1.0, Not enabled.
TLS Protocol: TLS 1.1, Not enabled.
TLS Protocol: TLS 1.2, Enabled cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"> <children /> </testresult> <testresult status="Warning" errorid="8fa9e3b3-fd10-4c0a-9faf-3ab517a252c9" contentUrl="https://docs.microsoft.com/microsoft-365/compliance/technical-reference-details-about-encryption" testdescription="Checking that your server supports modern TLS protocols and cipher suites." resultdescription="The test passed with some warnings encountered. Please expand the additional details." additionaldetails="Your server only supports 2 cipher suites compatible with Microsoft 365 services. You may want to enable additional cipher suites for enhanced compatibility.
Enabled cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover.jawsdevelopers.ch on port 443." resultdescription="The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate." additionaldetails="Remote certificate information:
Subject: CN=autodiscover.jawsdevelopers.ch
Issuer: CN=ZeroSSL RSA Domain Secure Site CA, O=ZeroSSL, C=AT
Thumbprint: 5A9E27FBB7F05697F5F1C3203CDED573A76F30D1
Not valid before: 2024-01-24 00:00:00Z
Expires: 2024-04-23 23:59:59Z"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Validating the certificate name." resultdescription="The certificate name was validated successfully." additionaldetails="Host name autodiscover.jawsdevelopers.ch was found in the Certificate Subject Common name."> <children /> </testresult> <testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Certificate trust is being validated." resultdescription="The certificate is trusted and all certificates are present in the chain." additionaldetails=""> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=autodiscover.jawsdevelopers.ch." resultdescription="One or more certificate chains were constructed successfully." additionaldetails="A total of 1 chains were built. The highest quality chain ends in root certificate CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US."> <children /> </testresult> <testresult status="Warning" errorid="1339c33a-8f21-427b-a323-4cee1a13f517" contentUrl="" testdescription="Analyzing the certificate chains for compatibility problems with versions of Windows." resultdescription="The test passed with some warnings encountered. Please expand the additional details." additionaldetails="The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled."> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing the certificate date to confirm the certificate is valid." resultdescription="Date validation passed. The certificate hasn't expired." additionaldetails="The certificate is valid. NotBefore = 1/24/2024 12:00:00 AM, NotAfter = 4/23/2024 11:59:59 PM"> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Checking the IIS configuration for client certificate authentication." resultdescription="Client certificate authentication wasn't detected." additionaldetails="Accept/Require Client Certificates isn't configured." elapsedMilliseconds="592"> <children /> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to send an Autodiscover POST request to potential Autodiscover URLs." resultdescription="Autodiscover settings weren't obtained when the Autodiscover POST request was sent." additionaldetails="" elapsedMilliseconds="965"> <children> <testresult status="Error" errorid="23455fbe-a868-429d-9dbf-503b80bff72b" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.jawsdevelopers.ch:443/Autodiscover/Autodiscover.xml for user timo.coupek@jawsdevelopers.ch." resultdescription="The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response." additionaldetails="None of the expected XML elements were found in the XML response.
HTTP Response Headers:
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15768000;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin
Content-Type: application/xml
Date: Wed, 24 Jan 2024 11:23:04 GMT
" elapsedMilliseconds="965"> <children /> </testresult> </children> </testresult> </children> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to contact the Autodiscover service using the HTTP redirect method." resultdescription="The attempt to contact Autodiscover using the HTTP Redirect method failed." additionaldetails="" elapsedMilliseconds="476"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover.jawsdevelopers.ch in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 213.193.78.34" elapsedMilliseconds="23"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 80 on host autodiscover.jawsdevelopers.ch to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="142"> <children /> </testresult> <testresult status="Error" errorid="12f4b21a-7e8d-4c95-b4a8-f4608e7d73b0" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is checking the host autodiscover.jawsdevelopers.ch for an HTTP redirect to the Autodiscover service." resultdescription="The Microsoft Connectivity Analyzer failed to get an HTTP redirect response for Autodiscover." additionaldetails="A Web exception occurred because an HTTP 404 - 404 response was received from Unknown.
HTTP Response Headers:
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Accept-Ranges: bytes
Content-Length: 3212
Content-Type: text/html
Date: Wed, 24 Jan 2024 11:23:04 GMT
ETag: "c8c-5dc807840f1c0;60e6cbb3326c8
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
" elapsedMilliseconds="309"> <children /> </testresult> </children> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to contact the Autodiscover service using the DNS SRV redirect method." resultdescription="The Microsoft Connectivity Analyzer failed to contact the Autodiscover service using the DNS SRV redirect method." additionaldetails="" elapsedMilliseconds="3046"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to locate SRV record _autodiscover._tcp.jawsdevelopers.ch in DNS." resultdescription="The Autodiscover SRV record was successfully retrieved from DNS." additionaldetails="The Service Location (SRV) record lookup returned host autodiscover.jawsdevelopers.ch." elapsedMilliseconds="208"> <children /> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://autodiscover.jawsdevelopers.ch:443/Autodiscover/Autodiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="2838"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover.jawsdevelopers.ch in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 213.193.78.34" elapsedMilliseconds="22"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 443 on host autodiscover.jawsdevelopers.ch to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="144"> <children /> </testresult> <testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Testing the SSL certificate to make sure it's valid." resultdescription="The certificate passed all validation requirements." additionaldetails="" elapsedMilliseconds="1843"> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is probing the TCP endpoint 213.193.78.34 on port 443 to detect which SSL/TLS protocols and cipher suites are enabled." resultdescription="We were able to detect the enabled protocols and cipher suites." additionaldetails="TLS Protocol: SSL v3, Not enabled.
TLS Protocol: TLS 1.0, Not enabled.
TLS Protocol: TLS 1.1, Not enabled.
TLS Protocol: TLS 1.2, Enabled cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"> <children /> </testresult> <testresult status="Warning" errorid="8fa9e3b3-fd10-4c0a-9faf-3ab517a252c9" contentUrl="https://docs.microsoft.com/microsoft-365/compliance/technical-reference-details-about-encryption" testdescription="Checking that your server supports modern TLS protocols and cipher suites." resultdescription="The test passed with some warnings encountered. Please expand the additional details." additionaldetails="Your server only supports 2 cipher suites compatible with Microsoft 365 services. You may want to enable additional cipher suites for enhanced compatibility.
Enabled cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover.jawsdevelopers.ch on port 443." resultdescription="The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate." additionaldetails="Remote certificate information:
Subject: CN=autodiscover.jawsdevelopers.ch
Issuer: CN=ZeroSSL RSA Domain Secure Site CA, O=ZeroSSL, C=AT
Thumbprint: 5A9E27FBB7F05697F5F1C3203CDED573A76F30D1
Not valid before: 2024-01-24 00:00:00Z
Expires: 2024-04-23 23:59:59Z"> <children /> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Validating the certificate name." resultdescription="The certificate name was validated successfully." additionaldetails="Host name autodiscover.jawsdevelopers.ch was found in the Certificate Subject Common name."> <children /> </testresult> <testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Certificate trust is being validated." resultdescription="The certificate is trusted and all certificates are present in the chain." additionaldetails=""> <children> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=autodiscover.jawsdevelopers.ch." resultdescription="One or more certificate chains were constructed successfully." additionaldetails="A total of 1 chains were built. The highest quality chain ends in root certificate CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US."> <children /> </testresult> <testresult status="Warning" errorid="1339c33a-8f21-427b-a323-4cee1a13f517" contentUrl="" testdescription="Analyzing the certificate chains for compatibility problems with versions of Windows." resultdescription="The test passed with some warnings encountered. Please expand the additional details." additionaldetails="The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled."> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing the certificate date to confirm the certificate is valid." resultdescription="Date validation passed. The certificate hasn't expired." additionaldetails="The certificate is valid. NotBefore = 1/24/2024 12:00:00 AM, NotAfter = 4/23/2024 11:59:59 PM"> <children /> </testresult> </children> </testresult> <testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Checking the IIS configuration for client certificate authentication." resultdescription="Client certificate authentication wasn't detected." additionaldetails="Accept/Require Client Certificates isn't configured." elapsedMilliseconds="149"> <children /> </testresult> <testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to send an Autodiscover POST request to potential Autodiscover URLs." resultdescription="Autodiscover settings weren't obtained when the Autodiscover POST request was sent." additionaldetails="" elapsedMilliseconds="677"> <children> <testresult status="Error" errorid="23455fbe-a868-429d-9dbf-503b80bff72b" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.jawsdevelopers.ch:443/Autodiscover/Autodiscover.xml for user timo.coupek@jawsdevelopers.ch." resultdescription="The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response." additionaldetails="None of the expected XML elements were found in the XML response.
HTTP Response Headers:
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15768000;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin
Content-Type: application/xml
Date: Wed, 24 Jan 2024 11:23:07 GMT
" elapsedMilliseconds="677"> <children /> </testresult> </children> </testresult> </children> </testresult> </children> </testresult> </children> </testresult> </children> </testresult> </children> </testresult>

And every time I give up and the next hour I try again something has changed again when I autocinfig in the services

esackbauer

Seems like your DNS setup and hostname configs are not properly done.
autodiscover SRV record seems to point to domain.com, SMTP HELO gives back mx.domain.com, but MX record points correctly to mail.domain.com. All should point to mail.domain.com.
https://docs.mailcow.email/getstarted/prerequisite-dns/

ilBiondojs

esackbauer hi
Didn’t know somebody reply’s so fast.

I will check it in max one hour. Anyway thanks very much for helping me. Appreciate

Hi esackbauer
I tried your solution and put fixed all hostname and dns errors. However, now I still have the same problem the following:
None of the expected XML elements were found in the XML response. HTTP Response Headers: Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Vary: Accept-Encoding Strict-Transport-Security: max-age=15768000; X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Robots-Tag: none X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin Content-Type: application/xml Date: Wed, 24 Jan 2024 12:20:54 GMT

esackbauer

You know that DNS records need some time to propagate to all DNS servers?
Try a little later again.

ilBiondojs

esackbauer Ok thanks. I just found someone that is trying a solution for a reversproxy. Mi server are currently this way:
x.x.x.1 -> router
x.x.x.2 -> mx server
x.x.x.3 -> web server
the mailcow dashboard is running on x.x.x.2 so i use 2 reverse proxy

for mx-admin.domain.com that points to x.x.x.2
and the second autodiscover & mail that still point to x.x.x.2
idk but maiby there is a problem or I need to configure nginx in a different way by using revers proxy

esackbauer

Read closely the instructions for reverse proxy:
https://docs.mailcow.email/post_installation/reverse-proxy/r_p/