Dear all,
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
I have tried all the ports in manual config but it just is not working while Apple Mail is able to connect perfectly,
here are my configuration details of "postconf -n" , "doveconf -n" and " master.cf" https://pastebin.com/M3XG9DXA
Thanks in advance.
make sure ports are set correctly in IPtables as it seems to be failing on TLS/SSL (open port 993)
Mark
On 6/22/2020 12:19 PM, Dshah wrote:
Dear all,
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
I have tried all the ports in manual config but it just is not working while Apple Mail is able to connect perfectly,
here are my configuration details of "postconf -n" , "doveconf -n" and "master.cf http://master.cf" https://pastebin.com/M3XG9DXA
Thanks in advance.
Thanks Mark,
I don't have iptables or other firewall block this port, it is behind a load balancer and port 993 is open. I am pretty sure it's something in my configuration which I linked above: https://pastebin.com/M3XG9DXA
On Mon, Jun 22, 2020 at 7:36 PM Mark Stevens manager@monmouth.com wrote:
make sure ports are set correctly in IPtables as it seems to be failing on TLS/SSL (open port 993)
Mark
On 6/22/2020 12:19 PM, Dshah wrote:
Dear all,
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
I have tried all the ports in manual config but it just is not working while Apple Mail is able to connect perfectly,
here are my configuration details of "postconf -n" , "doveconf -n" and " master.cf" https://pastebin.com/M3XG9DXA
Thanks in advance.
Am 22.06.2020 um 18:19 schrieb Dshah:
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
That error indicates to me that you are connecting to the MTA and not dovecot.. EHLO ist from the SMTP command set.
Alexander
On 22 Jun 2020, at 10:19, Dshah divxtamana@gmail.com wrote:
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
Mozilla Thunderbird is misconfigured. Double check all your server names and ports in Thunderbird’s config.
You should never send an EHLO from a MUA.
On 2020-06-22 3:16 p.m., @lbutlr wrote:
You should never send an EHLO from a MUA.
???
The MUA needs to send an EHLO to an MTA, it's how it finds out what the server supports.. I think this is a problem with configuration, but the this isn't really dovecot related, so probably doesn't belong on this list.
I might suggest that different email clients might respond differently to an advertisement of PIPELINE, so he probably should turn pipelining off in the MTA.. And start from there..
-- "Catch the Magic of Linux..."
Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at http://www.linuxmagic.com @linuxmagic A Wizard IT Company - For More Info http://www.wizard.ca "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company.
On 22/06/2020 18:19, Dshah wrote:
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
The problem is, AFAIK, Thunderbird's autoconfiguration. It tries to detect your SMTP settings (note: SMTP, i.e. for mail sending, not for receiving, which would actually involve dovecot), but does it violating the protocol (does pipelining without waiting for confirmation).
https://bugzilla.mozilla.org/show_bug.cgi?id=832457
The bug is old and considered to be resolved. And nobody cares :( If you use postfix a "workaround" is to temporarily disable postscreen, which IIRC is the one (rightly) complaining about the improper pipelining.
Cheers, Bernardo Reino
Hi all,
First I would like to Thank you all, it is such a responsive and wonderful community here.
I started to debug the issue by streaming logs and figured that EHLO was being sent when I click "Re-Test" button on thunderbird, another issue I encountered I was not able to connect ports 465/993, It was not blocked by firewall cause I could see live streaming logs, I think it's more on postfix side which I have sent for help.
here are my logs
and config ( postfix, dovecot) https://pastebin.com/M3XG9DXA
In case someone could help, I can pay a small amount for figuring out this issue.
Thanks again
On Tue, Jun 23, 2020 at 8:33 AM Bernardo Reino reinob@bbmk.org wrote:
On 22/06/2020 18:19, Dshah wrote:
I am stuck on this issue for days, I am able to connect on my IMAP server using Apple mail client but thunderbird shows me this error: "improper command pipelining after EHLO"
The problem is, AFAIK, Thunderbird's autoconfiguration. It tries to detect your SMTP settings (note: SMTP, i.e. for mail sending, not for receiving, which would actually involve dovecot), but does it violating the protocol (does pipelining without waiting for confirmation).
https://bugzilla.mozilla.org/show_bug.cgi?id=832457
The bug is old and considered to be resolved. And nobody cares :( If you use postfix a "workaround" is to temporarily disable postscreen, which IIRC is the one (rightly) complaining about the improper pipelining.
Cheers, Bernardo Reino
Am 23.06.2020 um 11:25 schrieb Dshah:
Hi all,
First I would like to Thank you all, it is such a responsive and wonderful community here.
I started to debug the issue by streaming logs and figured that EHLO was being sent when I click "Re-Test" button on thunderbird, another issue I encountered I was not able to connect ports 465/993, It was not blocked by firewall cause I could see live streaming logs, I think it's more on postfix side which I have sent for help.
here are my logs
You issue has nothing to do with dovecot.
From the log it is to be seen that Postfix rejects the attempt on sumissions port 465 because from client side not SMTP AUTH info is being sent. Because you properly configured "smtpd_recipient_restrictions=permit_sasl_authenticated,reject" within Postfix's master.cf
and config ( postfix, dovecot) https://pastebin.com/M3XG9DXA
In case someone could help, I can pay a small amount for figuring out this issue.
Thanks again
Alexander
Am 23.06.2020 um 07:33 schrieb Bernardo Reino:
If you use postfix a "workaround" is to temporarily disable postscreen, which IIRC is the one (rightly) complaining about the improper pipelining.
Cheers, Bernardo Reino
No, submitting on SMTP port 25 would be the wrong step. There's submission on port 587 or submissions (formerly called smtps) on port 465 for taking MUA requests authenticating and submitting a message.
Alexander
On 2020-06-23 8:24 a.m., Alexander Dalloz wrote:
Am 23.06.2020 um 07:33 schrieb Bernardo Reino:
If you use postfix a "workaround" is to temporarily disable postscreen, which IIRC is the one (rightly) complaining about the improper pipelining.
Cheers, Bernardo Reino
No, submitting on SMTP port 25 would be the wrong step. There's submission on port 587 or submissions (formerly called smtps) on port 465 for taking MUA requests authenticating and submitting a message.
Alexander
+1, you should even go farther and disable authentication on port 25
-- "Catch the Magic of Linux..."
Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at http://www.linuxmagic.com @linuxmagic A Wizard IT Company - For More Info http://www.wizard.ca "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company.
I disabled postscreen and enabled logging, I have all ports working except 993, in log when I try to connect on port 993
dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=10.244.0.24, lip=10.244.0.108, TLS handshaking: SSL_accept() failed: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, session=<rEH6ocGoOtUK9AAY>
I found that I could disable ssl3 by "ssl_protocols = !SSLv2 !SSLv3" but this option is not working (dovecot 2.3.10.1 (a3d0e1171)
On Tue, Jun 23, 2020 at 6:27 PM Michael Peddemors michael@linuxmagic.com wrote:
On 2020-06-23 8:24 a.m., Alexander Dalloz wrote:
Am 23.06.2020 um 07:33 schrieb Bernardo Reino:
If you use postfix a "workaround" is to temporarily disable postscreen, which IIRC is the one (rightly) complaining about the improper pipelining.
Cheers, Bernardo Reino
No, submitting on SMTP port 25 would be the wrong step. There's submission on port 587 or submissions (formerly called smtps) on port 465 for taking MUA requests authenticating and submitting a message.
Alexander
+1, you should even go farther and disable authentication on port 25
-- "Catch the Magic of Linux..."
Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at http://www.linuxmagic.com @linuxmagic A Wizard IT Company - For More Info http://www.wizard.ca "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company.
Am 23.06.2020 um 17:38 schrieb Dshah:
I disabled postscreen and enabled logging, I have all ports working except 993, in log when I try to connect on port 993
dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=10.244.0.24, lip=10.244.0.108, TLS handshaking: SSL_accept() failed: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, session=<rEH6ocGoOtUK9AAY>
I found that I could disable ssl3 by "ssl_protocols = !SSLv2 !SSLv3" but this option is not working (dovecot 2.3.10.1 (a3d0e1171)
Likely you have configured your mail client to issue a STARTTLS connection rather than a SSL one (implicit versue explicit SSL).
Port 143 -> STARTTLS Port 993 -> SSL / TLS
Alexander
participants (6)
-
＠lbutlr
-
Alexander Dalloz
-
Bernardo Reino
-
Dshah
-
Mark Stevens
-
Michael Peddemors