POP3 Not Working!!!

[@ndres]

Hello guys!!!

I have this problem:




The service is enabled:



Tail -f /opt/zimbra/log/mailbox.log:

2009-12-13 19:35:31,828 INFO  [Pop3SSLServer-36] [] ProtocolHandler - Handler exiting normally
2009-12-13 19:35:32,353 INFO  [Pop3SSLServer-37] [ip=##.##.##.##;] pop - connected
2009-12-13 19:35:32,355 INFO  [Pop3SSLServer-37] [ip=##.##.##.##;] ProtocolHandler - Exception occurred while handling connection
java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(SocketInputStream.java:168)
at com.sun.net.ssl.internal.ssl.InputRecord.readFully(InputRecord.java:293)
at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:331)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:789)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1112)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:623)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at com.zimbra.cs.pop3.Pop3Handler.sendLine(Pop3Handler.java:361)
at com.zimbra.cs.pop3.Pop3Handler.sendResponse(Pop3Handler.java:350)
at com.zimbra.cs.pop3.Pop3Handler.sendOK(Pop3Handler.java:325)
at com.zimbra.cs.pop3.Pop3Handler.startConnection(Pop3Handler.java:116)
at com.zimbra.cs.pop3.TcpPop3Handler.setupConnection(TcpPop3Handler.java:42)
at com.zimbra.cs.tcpserver.ProtocolHandler.run(ProtocolHandler.java:130)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Thread.java:619)

I have upgrade from zcs-5.0.10_GA_2638.RHEL5.20081003052615 to zcs-6.0.3_GA_1915.RHEL5.20091118110117, but it did not fixed the problem!!!

BTW: SMTP is working perfectly!!!

Thank you very much for your help!!!

[phoenix]

It works for me, are you trying to connect to the correct port (that would be port 995) for POP3S? Does the following work:

openssl s_client -connect yourserver:995

Is there likely to be any firewall or anti-virus software blocking access?

[@ndres]

The Service was working until last week...

The list of open ports in the Zimbra Server:

[phoenix]

How about the output of the command I asked you to run?

[@ndres]

Originally Posted by phoenix

How about the output of the command I asked you to run?

[root@mail /]# openssl s_client -connect 127.0.0.1:995
CONNECTED(00000003)
depth=0 /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
verify error:num=27:certificate not trusted
verify return:1
depth=0 /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
   i:/C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
---
Server certificate
-----BEGIN CERTIFICATE-----
MIICsjCCAhugAwIBAgIFEiRjaIQwDQYJKoZIhvcNAQEEBQAwgZUxCzAJBgNVBAYT
459qqniBC26kiRRphphzEj0elj6JkGEDanO4+gDAaM/vgkSSclGr8rDOJBHPidPJ
qgVqjXxjlj1HhR8J8OVWAtn88QOUXQ==
-----END CERTIFICATE-----
subject=/C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
issuer=/C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=MailServer
---
No client certificate CA names sent
---
SSL handshake has read 1266 bytes and written 291 bytes
---
New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : EDH-RSA-DES-CBC3-SHA
    Session-ID: 4B28006211ABB19781D1AF801B264858E15EE4997AB35C6A570837FC2B55E0ED
    Session-ID-ctx:
    Master-Key: D898D1F4CD76D6EA7AFC041020E3E15E00B028A75FBD51FDDBE1950F0D380268E21C96C96F54508B5ACD775B71F05AD7
    Key-Arg   : None
    Krb5 Principal: None
    Start Time: 1260912738
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---
+OK MailServer Zimbra POP3 server ready

[phoenix]

Have you tried running that command from a machine other than the Zimbra server?

Have you removed anything from the information you've posted above? The following isn't correct for your server certificate:

Server certificate
-----BEGIN CERTIFICATE-----
MIICsjCCAhugAwIBAgIFEiRjaIQwDQYJKoZIhvcNAQEEBQAwgZ UxCzAJBgNVBAYT
459qqniBC26kiRRphphzEj0elj6JkGEDanO4+gDAaM/vgkSSclGr8rDOJBHPidPJ
qgVqjXxjlj1HhR8J8OVWAtn88QOUXQ==
-----END CERTIFICATE-----

[@ndres]

Originally Posted by phoenix

Have you tried running that command from a machine other than the Zimbra server?

[root@intranet /]# openssl s_client -connect 192.168.0.2:995
CONNECTED(00000003)
23558:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:
[root@intranet /]#

Originally Posted by phoenix

Have you removed anything from the information you've posted above? The following isn't correct for your server certificate:

Yeah... I've removed some information from the Zimbra Certificate...


Thank you very much for your help!!!

[@ndres]

Up........ :d

[@ndres]

Bump...up....