Thread: postfix + courierPOP3 / Outlook pc problem

I've a Debian mail server with Postfix and courier for pop3 connection,

when I try to connect on a pc outlook fault with error 0x800ccc90
Mac users are ok, and I've already Imap port thath works fine.

I've tried to change iptables rules, postfix conf and courier conf, but the error remain.

There aren't errors in the logs files, but If I run netstat I see a TIME WAIT on tcp6,
I think that some outlook versions try to use IPV6 connections or some different type of authentications, and this is the problem.


#postfix conf

Code:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases, proxy:mysql:/etc/postfix/mysql/aliases
biff = no
body_checks = regexp:/etc/postfix/body_checks
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = //usr/lib/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
default_destination_concurrency_limit = 1
empty_address_recipient = MAILER-DAEMON
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = .maildir/
inet_interfaces = xxx.xx.xxx.118, 127.0.0.1
local_destination_concurrency_limit = 2
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 25600000
mydestination = localhost $myhostname
mydomain = mydomain.it
myhostname = mx1.mydomain.it
mynetworks = 127.0.0.0/8, xxx.xx.xxx.118, xxx.xx.xxx.168, xxx.xx.xxx.143, xxx.xx.xxx.189, xxx.xx.xxx.99
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps  $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains  $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps  $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks  $virtual_mailbox_limit_maps
queue_directory = /var/spool/postfix
queue_minfree = 120000000
recipient_delimiter = +
relay_domains = proxy:mysql:/etc/postfix/mysql/relay_domains
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions = permit_mynetworks,    permit_sasl_authenticated,    reject_unknown_client,    reject_rbl_client zen.spamhaus.org
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,    permit_sasl_authenticated,    reject_invalid_helo_hostname,    reject_non_fqdn_helo_hostname
smtpd_recipient_restrictions = permit_mynetworks,    permit_sasl_authenticated,    reject_non_fqdn_hostname,    reject_non_fqdn_sender,    reject_non_fqdn_recipient,    reject_unauth_destination,    reject_unauth_pipelining,    reject_invalid_hostname,    check_policy_service inet:127.0.0.1:10030,    reject_rbl_client zen.spamhaus.org
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/ssl/private/intermediate.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/private/*.mydomain.it.crt
smtpd_tls_key_file = /etc/ssl/private/*.mydomain.it.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
soft_bounce = no
strict_rfc821_envelopes = no
tls_random_source = dev:/dev/urandom
transport_maps = proxy:mysql:/etc/postfix/mysql/transport_maps, proxy:mysql:/etc/postfix/mysql/autoreply_domains
unknown_local_recipient_reject_code = 550
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/virtual_alias_maps, proxy:mysql:/etc/postfix/mysql/autoreply_aliases
virtual_gid_maps = static:999
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_domains
virtual_mailbox_limit = 2097152000
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_maps, proxy:mysql:/etc/postfix/mysql/virtual_mailbox_exts
virtual_minimum_uid = 999
virtual_uid_maps = static:999

iptables conf

Code:

Chain INPUT (policy DROP 0 packets, 0 bytes)
....
....
10779 1672K ACCEPT     tcp  --  *      *       0.0.0.0/0            xxx.xxx.xxx.xx      tcp spts:1024:65535 dpt:143 state NEW,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            178.79.185.118      tcp spts:1024:65535 dpt:110 state NEW,ESTABLISHED 


Chain OUTPUT (policy DROP 3 packets, 313 bytes)
....
20870   75M ACCEPT     tcp  --  *      *       xxx.xxx.xxx.xx       0.0.0.0/0           tcp spt:110 dpts:1024:65535 state ESTABLISHED 
12622   14M ACCEPT     tcp  --  *      *       xxx.xxx.xxx.xx       0.0.0.0/0           tcp spt:143 dpts:1024:65535 state ESTABLISHED 

....
Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      *       xxx.xxx.xxx.xx       0.0.0.0/0           tcp dpt:110