Quote:
Originally Posted by nixcraft
Create softlink to following file
Code:
cd /etc/ssl/certs/
sudo ln -s cacert.pem /etc/ssl/certs/dovecot.pem
sudo ln -s server.crt /etc/ssl/private/dovecot.pem
Restart and try again |
Hi nixcraft,
Thanks for your advice.
I solved my problem as follows;
$ sudo ln -s /etc/ssl/certs/ssl-cert-snakeoil.pem /etc/ssl/c
erts/dovecot.pem
$ sudo ln -s /etc/ssl/private/ssl-cert-snakeoil.key /etc/ssl
/private/dovecot.pem
No complaint
$ ls -l /etc/ssl/certs/
Code:
total 16
lrwxrwxrwx 1 root root 21 2008-04-18 07:28 a69cfdd6 -> ssl-cert-snakeoil.pem
-rw-r--r-- 1 root root 1208 2008-05-19 22:25 cacert.pem
lrwxrwxrwx 1 root root 36 2008-05-23 16:46 dovecot.pem -> /etc/ssl/certs/ssl-cert-snakeoil.pem
-rw-r--r-- 1 root root 904 2008-05-07 20:39 server.crt
-rw-r--r-- 1 root root 895 2008-05-19 22:20 smtpd.crt
-rw-r--r-- 1 root root 1139 2008-04-18 07:28 ssl-cert-snakeoil.pem
$ sudo ls -l /etc/ssl/private/
Code:
total 20
-rw-r--r-- 1 root root 963 2008-05-19 22:25 cakey.pem
lrwxrwxrwx 1 root root 38 2008-05-23 16:49 dovecot.pem -> /etc/ssl/private/ssl-cert-snakeoil.key
-rw-r--r-- 1 root root 963 2008-05-07 20:39 server.key
-rw-r--r-- 1 root root 963 2008-05-04 01:01 server.key.origin.20080507
-rw-r--r-- 1 root root 887 2008-05-19 22:21 smtpd.key
-rw-r----- 1 root ssl-cert 887 2008-04-18 07:28 ssl-cert-snakeoil.key
$ sudo /etc/init.d/dovecot restart
Code:
Restarting mail server: dovecotWarning: Fixing permissions of /var/run/dovecot to be world-readable
Warning: Corrected permissions for login directory /var/run/dovecot/login
.
$ telnet localhost pop3
Code:
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK Dovecot ready.
quit
+OK Logging out
Connection closed by foreign host.
On building this server previously.
/etc/ssl/certs/dovecot.pem
/etc/ssl/private/dovecot.pem
were there. I can't resolve why they disappear. I don't run this server daily. I resume testing only when I have time.
But the server still can't receive emails.
I found on router ports, 25, 110, 143, 443, 995 etc. forward to 192.168.0.10 NOT the IP address of this server, 192.168.0.52.
Performed following test;
1)
w/o forwording port 143 to this server under test, 192.168.0.52. The webmail sent on yahoo was returned immediately.
Warning on yahoo
Code:
We're sorry. There's a problem with the e-mail address(es) you're
trying
to send to. Please verify the address(es) and try again. If you
continue
to have problems, please contact Customer Support at (480) 624-2500.
<satimis@satimis.com>:
child status 100...The e-mail message could not be delivered because
there are no users here by that name.
--- Below this line is a copy of the message.
.....
2)
forwarding port 143 to 192.168.0.52 the mail was NOT returned immediately. Neither it was delivered to the server. On forwarding port 143 back to 192.168.0.10 the pending email was returned to yahoo immediately. Warning on yahoo was the same as before
$ tail /var/log/mail.log
Code:
May 23 16:53:35 lampserver dovecot: Dovecot v1.0.beta3 starting up
May 23 16:53:35 lampserver dovecot: Generating Diffie-Hellman parameters for the
first time. This may take a while..
May 23 16:53:39 lampserver dovecot: ssl-build-param: SSL parameters regeneration
completed
May 23 17:10:16 lampserver dovecot: pop3-login: Aborted login: rip=127.0.0.1, li
p=127.0.0.1, secured
May 23 18:04:38 lampserver postfix/master[4141]: terminating on signal 15
May 23 18:04:38 lampserver dovecot: Killed with signal 15
May 23 18:56:21 lampserver postfix/master[4141]: daemon started -- version 2.2.1
0, configuration /etc/postfix
May 23 18:56:21 lampserver dovecot: Dovecot v1.0.beta3 starting up
May 23 18:56:21 lampserver dovecot: Generating Diffie-Hellman parameters for the
first time. This may take a while..
May 23 18:56:24 lampserver dovecot: ssl-build-param: SSL parameters regeneration
completed
$ tail /var/log/mail.err
No printout
$ tail /var/log/messages
Code:
May 23 18:56:13 lampserver kernel: [ 35.958665] cdrom: open failed.
May 23 18:56:13 lampserver kernel: [ 36.656703] kjournald starting. Commit interval 5 seconds
May 23 18:56:13 lampserver kernel: [ 36.656830] EXT3 FS on sda5, internal journal
May 23 18:56:13 lampserver kernel: [ 36.656835] EXT3-fs: mounted filesystem with ordered data mode.
May 23 18:56:13 lampserver kernel: [ 40.863301] ppdev: user-space parallel port driver
May 23 18:56:18 lampserver kernel: [ 45.921848] Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
May 23 18:56:18 lampserver kernel: [ 46.174942] NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
May 23 18:56:18 lampserver kernel: [ 46.174960] NFSD: recovery directory /var/lib/nfs/v4recovery doesn't exist
May 23 18:56:18 lampserver kernel: [ 46.174963] NFSD: starting 90-second grace period
May 23 18:56:23 lampserver squid[4302]: Squid Parent: child process 4309 started
Please advise where shall I check. TIA
Edit;
$ sudo iptables -L
Code:
Password:
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
B.R.
satimis