OS/2, eCS & ArcaOS - Technical > Applications

PMMail questions.

<< < (2/4) > >>

Neil Waldhauer:
For a case like yours, where you only use stunnel for PMMail, you do not need to start anything. PMMail will manage the stunnel program and you do not need to configure anything apart from the settings Darius showed above.

I admit the help could be a little more helpful.

TeLLie:
Hi
I set al like the picturess showedl
But i still cannot connect to gmail..
I see in stunnel log:
2021.01.18 17:28:41 LOG4[ui]: Service [GMAIL - IN_GMAIL] needs authentication to prevent MITM attacks
2021.01.18 17:28:41 LOG4[ui]: Service [GMAIL - OUT_SMTP] needs authentication to prevent MITM attacks

Doug Bissett:
In PMMail-> Global Settings-> Secure Transfer is it enabled? Is it running? You do need to close the program, and start it again, to get it to run. It must be running to do the setup.

Check your entries (I didn't go through the pictures that were posted). It should all make sense. The local side uses localhost to talk to STunnel, which uses the given ports to talk to the remote host. The server address is used to relate the Account settings to the server settings.

Then, in each account, you need the server address, and logon information. You need to enable "Use Secure Channel (SSL)" so PMMail knows to use localhost rather than then the server address. Then you need the matching port. The ports associate what STunnel does. Looking at the pictures, I would not use port 995 for the local port. Use 110 in both the STunnel setup, and the account receive settings.

If you use STunnel with more than one mail server, you need to modify the local ports so they are not the same as what is used with a different mail server. Otherwise, STunnel can't tell the difference. What I do, is add 6, or 7, in front of the port numbers, and change all applicable settings.

Difficult to explain, but actually quite logical, after you figure it out.

TeLLie:
Hi Doug,


--- Quote from: Doug Bissett on January 18, 2021, 06:19:01 pm ---In PMMail-> Global Settings-> Secure Transfer is it enabled? Is it running? You do need to close the program, and start it again, to get it to run. It must be running to do the setup.

Check your entries (I didn't go through the pictures that were posted). It should all make sense. The local side uses localhost to talk to STunnel, which uses the given ports to talk to the remote host. The server address is used to relate the Account settings to the server settings.

Then, in each account, you need the server address, and logon information. You need to enable "Use Secure Channel (SSL)" so PMMail knows to use localhost rather than then the server address. Then you need the matching port. The ports associate what STunnel does. Looking at the pictures, I would not use port 995 for the local port. Use 110 in both the STunnel setup, and the account receive settings.

If you use STunnel with more than one mail server, you need to modify the local ports so they are not the same as what is used with a different mail server. Otherwise, STunnel can't tell the difference. What I do, is add 6, or 7, in front of the port numbers, and change all applicable settings.

Difficult to explain, but actually quite logical, after you figure it out.

--- End quote ---
Yes i see a proxy is running "Yes"

I have set local to 110 in global and in Account settings, should i do same for local  port 25

I have just only gmail

I see this in stunnel.conf:
socket = l:TCP_NODELAY=0
socket = r:TCP_NODELAY=0
client = yes
output = C:/PROGRAMS/PMMAIL/BIN/stunnel.log
verify = 0
debug  = 4

[GMAIL - IN_GMAIL]
  accept  = localhost:110
  connect = pop.gmail.com:995
  delay   = yes
;#  protocol = pop3

[GMAIL - OUT_SMTP]
  accept  = localhost: 25
  connect = smtp.gmail.com:587
  delay   = yes
  protocol = smtp

Why is pop3 disabled ??

And see i log this:

Mon, 18 Jan 2021 17:36:51 ==> Connection Failure:  Couldn't connect (err:61 - Connection refused). n tries [2]
Mon, 18 Jan 2021 17:29:44 ==> Error: Server broke connection
Mon, 18 Jan 2021 00:37:02 ==> Error: Server broke connection
Mon, 18 Jan 2021 00:29:33 ==> Error: Server broke connection

Dariusz Piatkowski:
TeLLie!


--- Quote from: TeLLie on January 18, 2021, 07:57:31 pm ---...Yes i see a proxy is running "Yes"

I have set local to 110 in global and in Account settings, should i do same for local  port 25

I have just only gmail

I see this in stunnel.conf:
socket = l:TCP_NODELAY=0
socket = r:TCP_NODELAY=0
client = yes
output = C:/PROGRAMS/PMMAIL/BIN/stunnel.log
verify = 0
debug  = 4

[GMAIL - IN_GMAIL]
  accept  = localhost:110
  connect = pop.gmail.com:995
  delay   = yes
;#  protocol = pop3

[GMAIL - OUT_SMTP]
  accept  = localhost: 25
  connect = smtp.gmail.com:587
  delay   = yes
  protocol = smtp

Why is pop3 disabled ??

--- End quote ---


Ahh, but there may be more to it. Not sure if this is right, apologies ahead if that's the wrong path to take.

So I went back to my old PMMail setup to look up the entries in stunnel.log, hoping there is something there that would help you out. Well, not a single presence of the LOG could be found.

However as it turns out in the PMMail's installation '\bin' directory there is the '\stunnel' subdirectory. In my instance (right or wrong, I do not know, but it was working for me) I have stunnel.conf present there as well.

In that stunnel.conf I have the following entries:


--- Code: ---[gmail-pop3]
client = yes
accept = 127.0.0.1:110
connect = pop.gmail.com:995
verifyChain = yes
CAfile = ca-certs.pem
checkHost = pop.gmail.com
OCSPaia = yes

[gmail-imap]
client = yes
accept = 127.0.0.1:143
connect = imap.gmail.com:993
verifyChain = yes
CAfile = ca-certs.pem
checkHost = imap.gmail.com
OCSPaia = yes

[gmail-smtp]
client = yes
accept = 127.0.0.1:25
connect = smtp.gmail.com:465
verifyChain = yes
CAfile = ca-certs.pem
checkHost = smtp.gmail.com
OCSPaia = yes

--- End code ---

That '\stunnel\ subdirectory has a readme.os2, which states:


--- Code: ---This is an OS/2 build of Stunnel 5.44 - updated 26th January 2018

--- End code ---

So for what it's worth, that's the config I had here.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version