Community Discussions and Support
POP3 SSL problem

[quote user="tBB"][quote user="vgracia"]

it does mean that the mercury v4.52 ssl over pop3 is now compatible with outlook?

[/quote]

No, it means that you need - as Thomas already mentioned - STunnel ( http://www.stunnel.org ) if you want native SSL over POP3/IMAP4 as Mercury doesn't support it. Note that the recommended port for POP3/SSL is 995 and for IMAP4/SSL is 993 as you can see here: http://www.stunnel.org/faq/misc.html so the required STunnel.conf entry(s) would look like:

;---

[POP3S-IN]
accept = 0.0.0.0:995
connect = 127.0.0.1:110
delay = yes
TIMEOUTbusy = 120
TIMEOUTclose = 0
TIMEOUTconnect = 120
TIMEOUTidle = 30

;---

and/or

;---

[IMAPS-IN]
accept = 0.0.0.0:993
connect = 127.0.0.1:143
delay = yes
TIMEOUTbusy = 120
TIMEOUTclose = 0
TIMEOUTconnect = 120
TIMEOUTidle = 30

;---

Best regards,

Nico

[/quote]


Hi,

I know this is an old thread, but where did you find those timeout values? Especially the "TIMEOUTclose = 0". The stunnel documentation only mentions this for a broken MSIE, not relevant for imap or pop and probably old news anyway. Are they really necessary and/or do they fix any known problems?


Greetins

Markus Borst


[quote user="tBB"][quote user="vgracia"]<P>it does mean that the mercury v4.52 ssl over pop3 is now compatible with outlook?</P>[/quote] No, it means that you need - as Thomas already mentioned - STunnel ( http://www.stunnel.org ) if you want native SSL over POP3/IMAP4 as Mercury doesn't support it. Note that the recommended port for POP3/SSL is 995 and for IMAP4/SSL is 993 as you can see here: http://www.stunnel.org/faq/misc.html so the required STunnel.conf entry(s) would look like: ;--- [POP3S-IN] accept = 0.0.0.0:995 connect = 127.0.0.1:110 delay = yes TIMEOUTbusy = 120 TIMEOUTclose = 0 TIMEOUTconnect = 120 TIMEOUTidle = 30 ;--- and/or ;--- [IMAPS-IN] accept = 0.0.0.0:993 connect = 127.0.0.1:143 delay = yes TIMEOUTbusy = 120 TIMEOUTclose = 0 TIMEOUTconnect = 120 TIMEOUTidle = 30 ;--- Best regards, Nico <P>[/quote]</P><P> </P><P>Hi,</P><P>I know this is an old thread, but where did you find those timeout values? Especially the "TIMEOUTclose = 0". The stunnel documentation only mentions this for a broken MSIE, not relevant for imap or pop and probably old news anyway. Are they really necessary and/or do they fix any known problems?</P><P> </P><P>Greetins</P><P>Markus Borst</P><P> </P>

I'm running Mercury/32 v4.01b and to enable reasonably secure roaming I am tinkering with SSL. I have been successful getting SSL and Authenticated SMTP working in MercuryS SMTP. In MercuryP POP3 I'm getting errors while trying to implement SSL per the instructions in the help file. Now here's the kicker...I'm using MS Outlook 2003!  It's not entirely by choice so don't beat me up too bad over it. Anyway the error on the client side (in Outlook) reads:

Task 'MyEmailAddress@xyz.com - Receiving' reported error (0x800CC0F): 'The connection to the server was interrupted. If the problem continues, contact your server administrator or Internet service provider (ISP).'

When I enabled session logging I would receive two separate session logs (where xxx.xxx.x.xx is the same IP) per POP3 request. The first one reads.

31:11.312: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008<lf>
20:31:11.312: << +OK <638167312.830@mail.xxxxx.com, POP3 server ready.<cr><lf>
20:31:11.312: >> €L
20:31:11.312: << -ERR Unrecognized command (try HELP).<cr><lf>
20:31:11.312: --- Connection closed normally at Fri Feb 29 20:31:11 2008. ---
20:31:11.328:

and the second one reads..

31:11.328: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008<lf>
20:31:11.328: << +OK <638167328.6366@mail.xxxxx.com>, POP3 server ready.<cr><lf>
20:31:11.328: --- Connection closed normally at Fri Feb 29 20:31:11 2008. ---
20:31:11.328:

I'm hoping that I missed something simple. Any ideas from anyone? I'm just wondering if I'm missing something real obvious.

 Thanks Mark D.

&lt;P&gt;I&#039;m running&amp;nbsp;Mercury/32 v4.01b and to enable reasonably secure roaming I am tinkering with SSL. I have been successful getting SSL and Authenticated SMTP working in MercuryS SMTP. In MercuryP POP3&amp;nbsp;I&#039;m getting&amp;nbsp;errors while trying to implement SSL per the instructions in the help file. Now here&#039;s the kicker...I&#039;m using MS Outlook 2003! &amp;nbsp;It&#039;s not entirely by choice so don&#039;t beat me up too bad over it. Anyway the error on the client side (in Outlook) reads:&lt;/P&gt; &lt;P&gt;Task &lt;A href=&quot;mailto:&#039;MyEmailAddress@xyz.com&quot;&gt;&#039;MyEmailAddress@xyz.com&lt;/A&gt; - Receiving&#039; reported error (0x800CC0F): &#039;The connection to the server was interrupted. If the problem continues, contact your server administrator or Internet service provider (ISP).&#039;&lt;/P&gt; &lt;P&gt;When I enabled session logging I would receive two separate session logs (where xxx.xxx.x.xx is the same IP) per&amp;nbsp;POP3 request. The first one reads.&lt;/P&gt; &lt;P&gt;31:11.312: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008&amp;lt;lf&amp;gt; 20:31:11.312: &amp;lt;&amp;lt; +OK &amp;lt;638167312.830@mail.xxxxx.com, POP3 server ready.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 20:31:11.312: &amp;gt;&amp;gt; &euro;L 20:31:11.312: &amp;lt;&amp;lt; -ERR Unrecognized command (try HELP).&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 20:31:11.312: --- Connection closed normally at Fri Feb 29 20:31:11 2008. --- 20:31:11.328:&lt;/P&gt; &lt;P&gt;and the second one reads..&lt;/P&gt; &lt;P&gt;31:11.328: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008&amp;lt;lf&amp;gt; 20:31:11.328: &amp;lt;&amp;lt; +OK &amp;lt;&lt;A href=&quot;mailto:638167328.6366@mail.xxxxx.com&quot;&gt;638167328.6366@mail.xxxxx.com&lt;/A&gt;&amp;gt;, POP3 server ready.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 20:31:11.328: --- Connection closed normally at Fri Feb 29 20:31:11 2008. --- 20:31:11.328:&lt;/P&gt; &lt;P&gt;I&#039;m hoping that I missed something simple. Any ideas from anyone? I&#039;m just wondering if I&#039;m missing something real obvious. &lt;/P&gt; &lt;P&gt;&amp;nbsp;Thanks Mark D.&lt;/P&gt;

[quote user="markd"]

I'm running Mercury/32 v4.01b and to enable reasonably secure roaming I am tinkering with SSL. I have been successful getting SSL and Authenticated SMTP working in MercuryS SMTP. In MercuryP POP3 I'm getting errors while trying to implement SSL per the instructions in the help file. Now here's the kicker...I'm using MS Outlook 2003!  It's not entirely by choice so don't beat me up too bad over it. Anyway the error on the client side (in Outlook) reads:

Task 'MyEmailAddress@xyz.com - Receiving' reported error (0x800CC0F): 'The connection to the server was interrupted. If the problem continues, contact your server administrator or Internet service provider (ISP).'

When I enabled session logging I would receive two separate session logs (where xxx.xxx.x.xx is the same IP) per POP3 request. The first one reads.

31:11.312: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008<lf>
20:31:11.312: << +OK <638167312.830@mail.xxxxx.com, POP3 server ready.<cr><lf>
20:31:11.312: >> €L
20:31:11.312: << -ERR Unrecognized command (try HELP).<cr><lf>
20:31:11.312: --- Connection closed normally at Fri Feb 29 20:31:11 2008. ---
20:31:11.328:

and the second one reads..

31:11.328: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008<lf>
20:31:11.328: << +OK <638167328.6366@mail.xxxxx.com>, POP3 server ready.<cr><lf>
20:31:11.328: --- Connection closed normally at Fri Feb 29 20:31:11 2008. ---
20:31:11.328:

I'm hoping that I missed something simple. Any ideas from anyone? I'm just wondering if I'm missing something real obvious.

 Thanks Mark D.

[/quote]

 

Mercury/32 does TLS via STARTTLS,  Outlook does not support this standard, it only support SSL.  The only way this can be done with Outlook is to use STunnel to allow Mercury/32 to do SSL.

FWIW, you really should upgrade to v4.52.  This is especially true if you are running MercuryS.

 

 

 

[quote user=&quot;markd&quot;]&lt;p&gt;I&#039;m running&amp;nbsp;Mercury/32 v4.01b and to enable reasonably secure roaming I am tinkering with SSL. I have been successful getting SSL and Authenticated SMTP working in MercuryS SMTP. In MercuryP POP3&amp;nbsp;I&#039;m getting&amp;nbsp;errors while trying to implement SSL per the instructions in the help file. Now here&#039;s the kicker...I&#039;m using MS Outlook 2003! &amp;nbsp;It&#039;s not entirely by choice so don&#039;t beat me up too bad over it. Anyway the error on the client side (in Outlook) reads:&lt;/p&gt; &lt;p&gt;Task &lt;a href=&quot;mailto:%27MyEmailAddress@xyz.com&quot; mce_href=&quot;mailto:&#039;MyEmailAddress@xyz.com&quot;&gt;&#039;MyEmailAddress@xyz.com&lt;/a&gt; - Receiving&#039; reported error (0x800CC0F): &#039;The connection to the server was interrupted. If the problem continues, contact your server administrator or Internet service provider (ISP).&#039;&lt;/p&gt; &lt;p&gt;When I enabled session logging I would receive two separate session logs (where xxx.xxx.x.xx is the same IP) per&amp;nbsp;POP3 request. The first one reads.&lt;/p&gt; &lt;p&gt;31:11.312: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008&amp;lt;lf&amp;gt; 20:31:11.312: &amp;lt;&amp;lt; +OK &amp;lt;638167312.830@mail.xxxxx.com, POP3 server ready.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 20:31:11.312: &amp;gt;&amp;gt; &euro;L 20:31:11.312: &amp;lt;&amp;lt; -ERR Unrecognized command (try HELP).&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 20:31:11.312: --- Connection closed normally at Fri Feb 29 20:31:11 2008. --- 20:31:11.328:&lt;/p&gt; &lt;p&gt;and the second one reads..&lt;/p&gt; &lt;p&gt;31:11.328: Connection from xxx.xxx.x.xx, Fri Feb 29 20:31:11 2008&amp;lt;lf&amp;gt; 20:31:11.328: &amp;lt;&amp;lt; +OK &amp;lt;&lt;a href=&quot;mailto:638167328.6366@mail.xxxxx.com&quot; mce_href=&quot;mailto:638167328.6366@mail.xxxxx.com&quot;&gt;638167328.6366@mail.xxxxx.com&lt;/a&gt;&amp;gt;, POP3 server ready.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 20:31:11.328: --- Connection closed normally at Fri Feb 29 20:31:11 2008. --- 20:31:11.328:&lt;/p&gt; &lt;p&gt;I&#039;m hoping that I missed something simple. Any ideas from anyone? I&#039;m just wondering if I&#039;m missing something real obvious. &lt;/p&gt; &lt;p&gt;&amp;nbsp;Thanks Mark D.&lt;/p&gt;&lt;p&gt;[/quote]&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;Mercury/32 does TLS via STARTTLS,&amp;nbsp; Outlook does not support this standard, it only support SSL.&amp;nbsp; The only way this can be done with Outlook is to use STunnel to allow Mercury/32 to do SSL.&lt;/p&gt;&lt;p&gt;FWIW, you really should upgrade to v4.52.&amp;nbsp; This is especially true if you are running MercuryS.&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;

it does mean that the mercury v4.52 ssl over pop3 is now compatible with outlook?

i'm experiencing problem with outlook when i try to configure pop3/imap4 with ssl 

my mercury is v4.52 

 

any idea??

 

thanks

&lt;P&gt;it does mean that the mercury v4.52 ssl over pop3 is now compatible with outlook?&lt;/P&gt; &lt;P&gt;i&#039;m experiencing&amp;nbsp;problem with outlook when i try to configure pop3/imap4 with ssl&amp;nbsp;&lt;/P&gt; &lt;P&gt;my mercury is v4.52&amp;nbsp;&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;&amp;nbsp;&lt;/P&gt; &lt;P&gt;any idea??&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;&amp;nbsp;&lt;/P&gt; &lt;P&gt;thanks&lt;/P&gt;

The suggested upgrade to Mercury/32 4.52 is for security reasons -  4.01b is not to be considered safe.

/Rolf 

&lt;p&gt;The suggested upgrade to Mercury/32 4.52 is for security reasons -&amp;nbsp; 4.01b is not to be considered safe.&lt;/p&gt;&lt;p&gt;/Rolf&amp;nbsp;&lt;/p&gt;

[quote user="vgracia"]

it does mean that the mercury v4.52 ssl over pop3 is now compatible with outlook?

[/quote]

No, it means that you need - as Thomas already mentioned - STunnel ( http://www.stunnel.org ) if you want native SSL over POP3/IMAP4 as Mercury doesn't support it. Note that the recommended port for POP3/SSL is 995 and for IMAP4/SSL is 993 as you can see here: http://www.stunnel.org/faq/misc.html so the required STunnel.conf entry(s) would look like:

;---

[POP3S-IN]
accept = 0.0.0.0:995
connect = 127.0.0.1:110
delay = yes
TIMEOUTbusy = 120
TIMEOUTclose = 0
TIMEOUTconnect = 120
TIMEOUTidle = 30

;---

and/or

;---

[IMAPS-IN]
accept = 0.0.0.0:993
connect = 127.0.0.1:143
delay = yes
TIMEOUTbusy = 120
TIMEOUTclose = 0
TIMEOUTconnect = 120
TIMEOUTidle = 30

;---

Best regards,

Nico
[quote user=&quot;vgracia&quot;]&lt;P&gt;it does mean that the mercury v4.52 ssl over pop3 is now compatible with outlook?&lt;/P&gt;[/quote] No, it means that you need - as Thomas already mentioned - STunnel ( http://www.stunnel.org ) if you want native SSL over POP3/IMAP4 as Mercury doesn&#039;t support it.&nbsp;Note&nbsp;that&nbsp;the&nbsp;recommended port&nbsp;for&nbsp;POP3/SSL&nbsp;is&nbsp;995&nbsp;and&nbsp;for IMAP4/SSL is 993 as&nbsp;you&nbsp;can&nbsp;see&nbsp;here:&nbsp;http://www.stunnel.org/faq/misc.html&nbsp;so&nbsp;the&nbsp;required&nbsp;STunnel.conf entry(s)&nbsp;would&nbsp;look&nbsp;like: ;--- [POP3S-IN] accept = 0.0.0.0:995 connect = 127.0.0.1:110 delay = yes TIMEOUTbusy = 120 TIMEOUTclose = 0 TIMEOUTconnect = 120 TIMEOUTidle = 30 ;--- and/or ;--- [IMAPS-IN] accept = 0.0.0.0:993 connect = 127.0.0.1:143 delay = yes TIMEOUTbusy = 120 TIMEOUTclose = 0 TIMEOUTconnect = 120 TIMEOUTidle = 30 ;--- Best regards, Nico

thanks for the response. it is ok.

if we use stunnel to implement ssl over pop3/imap4, how does configure mercury to accept only ssl connection?

&lt;P&gt;thanks for the response. it is ok.&lt;/P&gt; &lt;P&gt;if we use stunnel to implement ssl over pop3/imap4, how does configure mercury to accept only ssl connection?&lt;/P&gt;

You could block ports 110/143 at your firewall/router and only allow 995/993.  You could also change 'connection control' in the POP and IMAP modules to only allow connections from localhost (127.0.0.1) or whereever you are running stunnel, and refuse all others.

 

&lt;P&gt;You could block ports 110/143 at your firewall/router and only allow 995/993.&amp;nbsp; You could also change &#039;connection control&#039; in the POP and IMAP modules to only allow connections from localhost (127.0.0.1) or whereever you are running stunnel, and refuse all others.&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;&amp;nbsp;&lt;/P&gt;

many thanks

 

cheers

 

Victor

&lt;P&gt;many thanks&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;&amp;nbsp;&lt;/P&gt; &lt;P&gt;cheers&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;&amp;nbsp;&lt;/P&gt; &lt;P&gt;Victor&lt;/P&gt;
live preview
enter atleast 10 characters
WARNING: You mentioned %MENTIONS%, but they cannot see this message and will not be notified
Saving...
Saved
With selected deselect posts show selected posts
All posts under this topic will be deleted ?
Cancel
Delete
Pending draft ... Click to resume editing
Discard draft