I do have iptables running, but you should be able to connect.. 25 is open. Try opening http://mail.nlujodhpur.ac.in
If you cannot see the login page, then there's a problem somewhere outside my network. Maybe my ISP is blocking something. Let me know if you can connect. Thanks Here's my /etc/sysconfig/iptables file ------------------------------ -A INPUT -i lo -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A INPUT -p tcp -m tcp --dport 22 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 25 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p udp -m udp --dport 53 -j ACCEPT -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 110 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 113 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 143 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 443 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 465 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 783 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 993 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -p tcp -m tcp --dport 995 --tcp-flags SYN,RST,ACK SYN -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -m state --state NEW -j REJECT --reject-with icmp-port-unreachable -A OUTPUT -o lo -j ACCEPT -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT -A OUTPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT COMMIT # Completed on Mon Oct 3 08:12:43 2005 --------------------------------- On 10/8/05, Ing-Long Eric Kuo (DraconPern) <[EMAIL PROTECTED]> wrote: > do yo have a firewall blocking 25? I can't connect to it at all. > > -Eric :: DraconPern :: draconpern.deviantart.com > www.frontmotion.com :: www.draconpern.com > ----- Original Message ----- > From: "Aditya Nag" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Saturday, October 08, 2005 3:36 AM > Subject: Re: [qmailtoaster] SMTP +SSL/ SMTP+TLS not working? > > > I tried with outlook express and thunderbird. > > Outlook express gives me this error. > > Unable to establish a SSL connection with the server. Account: > 'mail.nlujodhpur.ac.in', Server: 'mail.nlujodhpur.ac.in', Protocol: > SMTP, Server Response: '454 TLS not available due to temporary > reason', Port: 25, Secure(SSL): Yes, Server Error: 454, Error Number: > 0x800CCC7F > > Thunderbird gives me this error > > "Unable to connect to SMTP server mail.nlujodhpur.ac.in. The server > may be down or incorrectly configured. Please verify your Mail/News > account settings are correct and try again" > > > On 10/8/05, Erik Espinoza <[EMAIL PROTECTED]> wrote: > > Have you tried connecting to the TLS or SSL setup with a different > > client? Some clients will not allow you to connect iwthout a signed > > cert. > > > > erik > > > > On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > > > My certificate shows the FQDN so that shouldn't be the problem. What > > > else could it be? > > > > > > > > > On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > > > > CONNECTED(00000003) > > > > depth=0 /C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > > > verify error:num=18:self signed certificate > > > > verify return:1 > > > > depth=0 /C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > > > verify return:1 > > > > --- > > > > Certificate chain > > > > 0 s:/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > > > i:/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > > > -----BEGIN CERTIFICATE----- > > > > MIIDpDCCAw2gAwIBAgIBADANBgkqhkiG9w0BAQQFADCBmTELMAkGA1UEBhMCSU4x > > > > EjAQBgNVBAgTCVJhamFzdGhhbjEQMA4GA1UEBxMHSm9kaHB1cjEgMB4GA1UEChMX > > > > TmF0aW9uYWwgTGF3IFVuaXZlcnNpdHkxHjAcBgNVBAMTFW1haWwubmx1am9kaHB1 > > > > ci5hYy5pbjEiMCAGCSqGSIb3DQEJARYTYWRpdHlhbmFnQGdtYWlsLmNvbTAeFw0w > > > > NTEwMDMwMzE1MDdaFw0wNjEwMDMwMzE1MDdaMIGZMQswCQYDVQQGEwJJTjESMBAG > > > > A1UECBMJUmFqYXN0aGFuMRAwDgYDVQQHEwdKb2RocHVyMSAwHgYDVQQKExdOYXRp > > > > b25hbCBMYXcgVW5pdmVyc2l0eTEeMBwGA1UEAxMVbWFpbC5ubHVqb2RocHVyLmFj > > > > LmluMSIwIAYJKoZIhvcNAQkBFhNhZGl0eWFuYWdAZ21haWwuY29tMIGfMA0GCSqG > > > > SIb3DQEBAQUAA4GNADCBiQKBgQC7O4o1AXp4uOWxAAa7pr6nn50h1GFW2sxUlHu1 > > > > ZvsWQUKIqNidcUz7xCcFzw8S013j+zraHU24Zz0vLDkhxz4ELoAki1m2RLr5WMwQ > > > > vbQ/Ri07YpTKGcA+mTswlRr4qrZ6iHKmOoIjzR8x5h9jGx3i19+BgOuh8aSZPr1E > > > > uOfk+QIDAQABo4H5MIH2MB0GA1UdDgQWBBS003ZZndHzcSyuxNThkDlsGve65zCB > > > > xgYDVR0jBIG+MIG7gBS003ZZndHzcSyuxNThkDlsGve656GBn6SBnDCBmTELMAkG > > > > A1UEBhMCSU4xEjAQBgNVBAgTCVJhamFzdGhhbjEQMA4GA1UEBxMHSm9kaHB1cjEg > > > > MB4GA1UEChMXTmF0aW9uYWwgTGF3IFVuaXZlcnNpdHkxHjAcBgNVBAMTFW1haWwu > > > > bmx1am9kaHB1ci5hYy5pbjEiMCAGCSqGSIb3DQEJARYTYWRpdHlhbmFnQGdtYWls > > > > LmNvbYIBADAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBAUAA4GBABGASUJjpzwp > > > > vZgg3zllEKALd6o09pMePh4uSQ7X+cpbBie3BKANadwaQ32D20WA1aLprf1iLziG > > > > zFvvxlNPDKkjMQuNI/qlc7HF8/Vs/Nlwy3cyIRh3cs+sLgVQsQxtzGgS8sCyiPiP > > > > l550YaTCM9l4+bM2HQ/fbo+jGSsQOc04 > > > > -----END CERTIFICATE----- > > > > --- > > > > Server certificate > > > > subject=/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > > > issuer=/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > > > --- > > > > No client certificate CA names sent > > > > --- > > > > SSL handshake has read 1576 bytes and written 350 bytes > > > > --- > > > > New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA > > > > Server public key is 1024 bit > > > > SSL-Session: > > > > Protocol : TLSv1 > > > > Cipher : DHE-RSA-AES256-SHA > > > > Session-ID: > > > > 020E7E7A0DEA3BBAFCC482DD1A7E45EA9576DDFFEB1840236ED30913F55C86DD > > > > Session-ID-ctx: > > > > Master-Key: > > > > 0AB21E3FDC14E123A37329F6A601EB663461601BF57322609577FA58741B6D5B3DC69267074C7E919D2480A8F424D0A6 > > > > Key-Arg : None > > > > Krb5 Principal: None > > > > Start Time: 1128687326 > > > > Timeout : 300 (sec) > > > > Verify return code: 18 (self signed certificate) > > > > --- > > > > 220 Welcome to Qmail Toaster Ver. 1.2 smtp Server ESMTP > > > > > > > > _____________________________________ > > > > > > > > That's what I get.. > > > > Regards, > > > > Aditya > > > > > > > > > > > > On 10/7/05, Erik Espinoza <[EMAIL PROTECTED]> wrote: > > > > > Type the following command at the prompt and paste back the > > > > > response: > > > > > > > > > > $ openssl s_client -starttls smtp -showcerts -connect localhost:25 > > > > > > > > > > Thanks, > > > > > Erik > > > > > > > > > > On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > > > > > > my /var/qmail/control/me file contins one line, my servers FQDN. > > > > > > should there be something else here? > > > > > > > > > > > > Aditya > > > > > > > > > > > > > > > > > > On 10/7/05, Alvin Engler <[EMAIL PROTECTED]> wrote: > > > > > > > 1. /var/qmail/control/me should be set to the cname of your > > > > > > > secure > > > > > > > certificate > > > > > > > 2. in order to get depreciated SMTP + SSL (port 465) working I > > > > > > > had to > > > > > > > set up a custom process in /var/qmail/supervise/smtp-ssl. My > > > > > > > "run" file > > > > > > > is pasted below for reference. > > > > > > > > > > > > > > YMMV, > > > > > > > Alvin > > > > > > > > > > > > > > #!/bin/sh > > > > > > > QMAILDUID=`id -u vpopmail` > > > > > > > NOFILESGID=`id -g vpopmail` > > > > > > > MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` > > > > > > > BLACKLIST=`cat /var/qmail/control/blacklists` > > > > > > > SMTPD="/var/qmail/bin/qmail-smtpd" > > > > > > > TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb" > > > > > > > RBLSMTPD="/usr/bin/rblsmtpd" > > > > > > > HOSTNAME=`hostname` > > > > > > > VCHKPW="/home/vpopmail/bin/vchkpw" > > > > > > > SMTPS=1 > > > > > > > export SMTPS > > > > > > > > > > > > > > exec /usr/bin/softlimit -m 12000000 \ > > > > > > > /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c > > > > > > > "$MAXSMTPD" \ > > > > > > > -u "$QMAILDUID" -g "$NOFILESGID" 0 465 \ > > > > > > > $RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1 > > > > > > > > > > > > > > Aditya Nag wrote: > > > > > > > > > > > > > > >Hi, > > > > > > > >So now everything is working, and my users are praising the > > > > > > > >speed of > > > > > > > >the new system.. Life is good. > > > > > > > > > > > > > > > >I have tested all the features and POP3, IMAP, POP3-SSL, > > > > > > > >IMAP-SSL are > > > > > > > >all working. But SMPT + TLS or SMTP + SSL does not work. Is > > > > > > > >there some > > > > > > > >way to get it working? I think Qmail toaster supports it, so I > > > > > > > >belive > > > > > > > >it's something wrong on my system. > > > > > > > > > > > > > > > >The error message I get with both SMTP-SSL and SMTP-TLS is > > > > > > > >"Unable to > > > > > > > >connect to the specified SMTP server" > > > > > > > > > > > > > > > >Normal SMTP works great. > > > > > > > > > > > > > > > >I did a tail -f /var/log/qmail/smtpd/current and tried to log > > > > > > > >in with > > > > > > > >SMPT-TLS and SMTP-SSL but it didn't show anything. > > > > > > > > > > > > > > > >I also tried switching off the firewall completely and then > > > > > > > >trying. No luck. > > > > > > > > > > > > > > > >what could i do to get this to work? > > > > > > > > > > > > > > > >Regards, > > > > > > > >Aditya > > > > > > > >-- > > > > > > > >www.adityanag.org > > > > > > > > > > > > > > > >--------------------------------------------------------------------- > > > > > > > >To unsubscribe, e-mail: > > > > > > > >[EMAIL PROTECTED] > > > > > > > >For additional commands, e-mail: > > > > > > > >[EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > > > To unsubscribe, e-mail: > > > > > > > [EMAIL PROTECTED] > > > > > > > For additional commands, e-mail: > > > > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > www.adityanag.org > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > > To unsubscribe, e-mail: > > > > > > [EMAIL PROTECTED] > > > > > > For additional commands, e-mail: > > > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: > > > > > [EMAIL PROTECTED] > > > > > For additional commands, e-mail: > > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > -- > > > > www.adityanag.org > > > > > > > > > > > > > -- > > > www.adityanag.org > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > -- > www.adityanag.org > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- www.adityanag.org --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
