Outlook 2010 not connecting to secure POP3
OK, I did not know that this user has a new computer with Outlook 2010.
This SHOULD make it easier but...
I have the computer right next to me, they brought it over. It is on the same LAN as this notebook. I can access my server with:
openssl s_client -connect z9m9z.htt-consult.com:995
And then log the user in with the appropriate POP3 credentials.
In Outlook 2010, in Advanced settings I have specified "This server requires an encrypted connection (SSL)" and it switches to port 995 (from 110). I try connecting and I get an error that
"Your server does notg support the connection encryption type you have specified."
The first time we tried this it installed my self-signed cert in the local cert store.
Any idea on what is going on or how to get this working?
I finally noticed this popup of K9 blocking https on port (143, 993, 995). So the user has to come back over here and disable K9 long enough to get things working.
ARGH!
On 11/23/2014 04:08 PM, Robert Moskowitz wrote:
no idea what you are talking about
K9 is a android client and works fine with TLS
no idea what has "https" to do with email nor why someone needs to "disable K9 long enugh" whatever "long enough" is - don't get me wrong but most technical context on several lists of you if it comes to details is cluttered and your permanently "i am working on IETF" even makes things worser
Am 23.11.2014 um 22:23 schrieb Robert Moskowitz:
Am 23.11.2014 um 22:33 schrieb Reindl Harald:
Yeah, such descriptions are leading to confusion, speculation k9 got mail downloaded before outlook could....no idea why sombody should use k9 with pop3
Best Regards MfG Robert Schetterer
-- [*] sys4 AG
http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
On 11/23/2014 04:45 PM, Robert Schetterer wrote:
And I did not know there was a K9 android app. K9 like in guard dogs.
The default settings only allow https stuff on port 443. Must be some attempt to get around controls to use TLS on any other port.
I really strongly dislike nanny software. But it is very popular in my community...
Am 23.11.2014 um 23:30 schrieb Robert Moskowitz:
that's why you should be precise in what you are posting - in context of mail K9 is for pretty anybody https://play.google.com/store/apps/details?id=com.fsck.k9
The default settings only allow https stuff on port 443. Must be some attempt to get around controls to use TLS on any other port.
uhm "telnet server port" is still the way to go *before* start other debuggings, if that don't work no need to try a high level client until that problem is solved
On 11/23/2014 05:59 PM, Reindl Harald wrote:
Got it for next time.
Well, since this was a secure connection test, needed openssl for the connect, not telnet. And how to do that on Windows? I DID try it on this F20 notebook, and of course it worked just fine. That was why I really suspected Windows TLS functions. Then when I was trying again, I caught a little pop up in the system tray saying how the nanny software was blocking the bad program that was trying to do https to port 995...
I really should be so harsh about the nanny software. It DOES protect a lot of families from content they do not want to see. Just that the defaults no longer match where we want internet privacy to go.
You just need openssl for windows here : http://slproweb.com/products/Win32OpenSSL.html
Let me know if this is working. Regards
CHUNKZ.NET - casual fiddler and computer technician Bertrand Caplet, Flers (FR) Feel free to send encrypted/signed messages Key ID: FF395BD9 GPG FP: DE10 73FD 17EB 5544 A491 B385 1EDA 35DC FF39 5BD9
By the way if this isn't working, try connecting to your server via Mozilla Thunderbird. You'll get fixed if this is related to K9 or to your server.
Regards
CHUNKZ.NET - casual fiddler and computer technician Bertrand Caplet, Flers (FR) Feel free to send encrypted/signed messages Key ID: FF395BD9 GPG FP: DE10 73FD 17EB 5544 A491 B385 1EDA 35DC FF39 5BD9
On 11/23/2014 06:37 PM, Bertrand Caplet wrote:
I use Thuderbird all the time. I would have to install it on the users computer. But the problem was a nanny software that was monitoring ports opened so any program that tried to connect to port 995 and do a TLS handshake would have gotten slapped down.
The user now knows that the K9 nanny software was blocking the mail. We
disabled it monitoring https and secure pop3 started working. So now
they have to figure out how to enable it and allow the mail to work.
Not my problem.
Am 24.11.2014 um 00:35 schrieb Bertrand Caplet:
this proves not outlook working, on windows there is maybe proxy stuff installed etc
Let me know if this is working. Regards
Best Regards MfG Robert Schetterer
-- [*] sys4 AG
http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
On 11/23/2014 04:33 PM, Reindl Harald wrote:
no idea what you are talking about
K9 is a android client and works fine with TLS
K9 for Redcoat is a 'nanny' watcher for Windows. It protects the home computer from all sorts of nastiness on the Internet. Very popular in my community. I do not use it.
Am 23.11.2014 um 22:23 schrieb Robert Moskowitz:
shit happens
however you may compare your settings with i.e
https://www2.suresupport.com/faq/79/471
notice: setting pop3 995 Tag : server requires an encr.. con.. SSL ..type TLS
Best Regards MfG Robert Schetterer
-- [*] sys4 AG
http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Am 23.11.2014 um 22:08 schrieb Robert Moskowitz:
learn to post details and configs, to be honest i feel disturbed by all your technical nonsense not able to express what you are talking about over that many years on so many lists for so many software
"dovecot -n" output needed at least "sslscan host:995" would also make sense
participants (4)
-
Bertrand Caplet
-
Reindl Harald
-
Robert Moskowitz
-
Robert Schetterer