Unable to send or receive email via Pegasus

Michael

posted Dec 24 '18 at 1:18 pm

Just in case you need a sample of what might have happened: This is what amnesty international published just these days.

Summary

We have identified several campaigns of
credentials phishing, likely operated by the same attackers, targeting
hundreds of individuals spread across the Middle East and North Africa.
In one campaign, the attackers were particularly going after
accounts on popular self-described “secure email” services, such as Tutanota and ProtonMail.
In another campaign, the attackers have been targeting hundreds of
Google and Yahoo accounts, successfully bypassing common forms of
two-factor authentication.

Just in case you need a sample of what might have happened: This is what <a mce_href="https://www.amnesty.org/en/latest/research/2018/12/when-best-practice-is-not-good-enough/" target="_blank" href="https://www.amnesty.org/en/latest/research/2018/12/when-best-practice-is-not-good-enough/">amnesty international published</a> just these days.<blockquote><h2 style="margin: 0cm; margin-bottom: .0001pt;">Summary</h2> <ul><li>We have&nbsp;identified several campaigns of credentials phishing, likely operated by the same attackers, targeting hundreds of individuals spread across the Middle East and North Africa.</li><li>In one&nbsp;campaign, the attackers were particularly going after accounts on popular self-described “secure email” services, such as Tutanota and ProtonMail.</li><li>In another&nbsp;campaign, the attackers have been targeting hundreds of Google and Yahoo accounts, successfully bypassing common forms of two-factor authentication.</li></ul></blockquote>

			Michael
--
IERenderer's Homepage
PGP Key ID (RSA 2048): 0xC45D831B
S/MIME Fingerprint: 94C6B471 0C623088 A5B27701 742B8666 3B7E657C

tomdriver

posted Dec 21 '18 at 10:31 pm

I have long used Pegasus. I use it to send email thru my ISP, which is Comcast, and to download my incoming email from Gmail. Both sending and receiving are now producing error messages, and I have no idea why.

Perhaps someone can help me re-configure the POP3 settings for use with Gmail and help me clear up at least that part of the problem. Or is it all just one problem?

Oh. I also get an IMAP error message when I open Pegasus. I don't know anything about IMAP.

Tom

I have long used Pegasus.&nbsp; I use it to send email thru my ISP, which is Comcast, and to download my incoming email from Gmail.&nbsp; Both sending and receiving are now producing error messages, and I have no idea why.Perhaps someone can help me re-configure the POP3 settings for use with Gmail and help me clear up at least that part of the problem.&nbsp; Or is it all just one problem?Oh.&nbsp; I also get an IMAP error message when I open Pegasus.&nbsp; I don't&nbsp; know anything about IMAP.Tom&nbsp;&nbsp;

Brian Fluet

posted Dec 22 '18 at 2:22 am

That fact that both sending and receiving have failed seems to indicate a problem unrelated to Pegasus Mail. Some details of the error messages would be helpful.

Here is some information about Gmail with Pegasus Mail.

On the Gmail side you must enable POP3/IMAP, find the setting to
allow less secure apps and turn it on, and not use 2-factor
authentication. Note: There is a place to specify access by specific
apps which you can use instead of allowing less secure apps if you prefer.

Configuration settings:

POP3: (they don't list POP3 configuration settings but these work)
pop.gmail.com
port 995
SSL

IMAP:
imap.gmail.com
port 993
SSL

SMTP:
smtp.gmail.com
port 465 for SSL
port 587 for TLS/STARTTLS

That fact that both sending and receiving have failed seems to indicate a problem unrelated to Pegasus Mail.&nbsp; Some details of the error messages would be helpful.Here is some information about Gmail with Pegasus Mail. On the Gmail side you must enable POP3/IMAP, find the setting to allow less secure apps and turn it on, and not use 2-factor authentication.&nbsp; Note: There is a place to specify access by specific apps which you can use instead of allowing less secure apps if you prefer. Configuration settings:POP3: (they don't list POP3 configuration settings but these work) pop.gmail.com port 995 SSL IMAP: imap.gmail.com port 993 SSL SMTP: smtp.gmail.com port 465 for SSL port 587 for TLS/STARTTLS

tomdriver

posted Dec 22 '18 at 1:21 pm

Thank you very much. I made the necessary settings in Google and in Pegasus. Then I tried to both send and receive using Pegasus. In both cases I got error messages including a "Trace showing end of transaction." In both cases the trace ends with this: "ERR [AUTH] Username and password not accepted."

What is so strange is that the same username and password work perfectly well when I sign in to my Google account directly with my Firefox browser.

Any thoughts?

Thank you very much.&nbsp; I made the necessary settings in Google and in Pegasus.&nbsp; Then I tried to both send and receive using Pegasus.&nbsp; In both cases I got error messages including a "Trace showing end of transaction."&nbsp; In both cases the trace ends with this:&nbsp; "ERR [AUTH] Username and password not accepted."What is so strange is that the same username and password work perfectly well when I sign in to my Google account directly with my Firefox browser.&nbsp;Any thoughts?&nbsp;

Shades

posted Dec 22 '18 at 2:36 pm

As both (unrelatated) accounts are failing it may be a good idea to set session loging, either per session (Tools|Options|create session log) or in cmd line (-Z 32) and compare your password(s) to the ones you use to manually log in

As both (unrelatated) accounts are failing it may be a good idea to set session loging, either per session (Tools|Options|create session log) or in cmd line (-Z 32) and compare your password(s) to the ones you use to manually log in

Brian Fluet

posted Dec 23 '18 at 3:17 am

[quote user="tomdriver"]What is so strange is that the same username and password work perfectly well when I sign in to my Google account directly with my Firefox browser.

Any thoughts?[/quote]

Are you sure the "allow less secure apps" option is enabled in Gmail?

[quote user="tomdriver"]What is so strange is that the same username and password work perfectly well when I sign in to my Google account directly with my Firefox browser.&nbsp;Any thoughts?[/quote]Are you sure the "allow less secure apps" option is enabled in Gmail?&nbsp;

tomdriver

posted Dec 23 '18 at 12:52 pm

I didn't find "allow less secure apps" option in Gmail. I did find other security settings that seemed OK.

But I stumbled upon something strange in my computer: Windows put up a notice that my account settings were out of date. It led me to Windows Settings, where my Gmail password was empty. I put it in. A few minutes later the same error occurred. I repeated this several times. Each time Windows first said the account was OK, but a few seconds later the password was missing again. Is this an undetected virus, or what?

I didn't find "allow less secure apps" option in Gmail.&nbsp; I did find other security settings that seemed OK.But I stumbled upon something strange in my computer:&nbsp; Windows put up a notice that my account settings were out of date.&nbsp; It led me to Windows Settings, where my Gmail password was empty.&nbsp; I put it in.&nbsp; A few minutes later the same error occurred.&nbsp; I repeated this several times.&nbsp; Each time Windows first said the account was OK, but a few seconds later the password was missing again.&nbsp; Is this an undetected virus, or what?

Shades

posted Dec 23 '18 at 2:51 pm

What were you doing when you get that message?

Or more where were you going it (in which app)

What were you doing when you get that message?&nbsp;Or more where were you going it (in which app)

Michael

posted Dec 23 '18 at 5:03 pm

[quote user="tomdriver"]Windows put up a notice that my account settings were out of date. It led me to Windows Settings, where my Gmail password was empty. I put it in. A few minutes later the same error occurred. I repeated this several times. Each time Windows first said the account was OK, but a few seconds later the password was missing again. Is this an undetected virus, or what?[/quote]

What does "WIndows did", "Windows led" etc. mean? Why would Windows care about your GMAIL settings?

IMO this sounds a lot like phishing attempts so you should go directly to GMAIL.COM (better do so using another device in case your local hosts file has been modified already as well) and change your password there if not cancel the account immediately. Just hope you didn't use your account for logging in to other web services ...

[quote user="tomdriver"]Windows put up a notice that my account settings were out of date.&nbsp; It led me to Windows Settings, where my Gmail password was empty.&nbsp; I put it in.&nbsp; A few minutes later the same error occurred.&nbsp; I repeated this several times.&nbsp; Each time Windows first said the account was OK, but a few seconds later the password was missing again.&nbsp; Is this an undetected virus, or what?[/quote]&nbsp;What does "WIndows did", "Windows led"&nbsp; etc. mean? Why would Windows care about your GMAIL settings? IMO this sounds a lot like phishing attempts so you should go directly to GMAIL.COM (better do so using another device in case your local hosts file has been modified already as well) and change your password there if not cancel the account immediately. Just hope you didn't use your account for logging in to other web services ...

			Michael
--
IERenderer's Homepage
PGP Key ID (RSA 2048): 0xC45D831B
S/MIME Fingerprint: 94C6B471 0C623088 A5B27701 742B8666 3B7E657C

Summary

Related Topics

Pending draft

Confirm move posts

Insufficient permissions

Select a different topic

Edit history