docker-mailserver: Unable to use secure authentication for dovecot and postfix
π Preliminary Checks
- I tried searching for an existing issue and followed the debugging docs advice, but still need assistance.
π What Happened?
Unable to use secure method to authenticate for imap/pop and postfix.
π Reproduction Steps
Use the example compose file.
Add use sarit to the system.
π DMS Version
12.1.0
π» Operating System and Architecture
AWS t2.small Linux ip-172-31-23-120 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64 GNU/Linux
βοΈ Container configuration files
version: '2'
services:
mailserver:
image: ghcr.io/docker-mailserver/docker-mailserver:latest
container_name: mailserver
# Provide the FQDN of your mail server here (Your DNS MX record should point to this value)
hostname: mail.elcolie.com
environment:
- SSL_TYPE=letsencrypt
volumes:
- ./docker-data/certbot/certs/:/etc/letsencrypt
ports:
- "25:25"
- "143:143"
- "465:465"
- "587:587"
- "993:993"
volumes:
- ./docker-data/dms/mail-data/:/var/mail/
- ./docker-data/dms/mail-state/:/var/mail-state/
- ./docker-data/dms/mail-logs/:/var/log/mail/
- ./docker-data/dms/config/:/tmp/docker-mailserver/
- /etc/localtime:/etc/localtime:ro
environment:
- ENABLE_RSPAMD=1
- ENABLE_CLAMAV=1
- ENABLE_FAIL2BAN=1
- ENABLE_POP3=1
cap_add:
- NET_ADMIN # For Fail2Ban to work
restart: always
I canβt send an email.
thunderbird
docker
mailserver | Aug 7 08:54:00 mail postfix/smtps/smtpd[1024]: connect from ppp-171-97-99-32.revip8.asianet.co.th[171.97.99.32] mailserver | Aug 7 08:54:00 mail postfix/smtps/smtpd[1024]: lost connection after EHLO from ppp-171-97-99-32.revip8.asianet.co.th[171.97.99.32] mailserver | Aug 7 08:54:00 mail postfix/smtps/smtpd[1024]: disconnect from ppp-171-97-99-32.revip8.asianet.co.th[171.97.99.32] ehlo=1 commands=1
Then try SSL/TLS
thunderbird sending forever
But docker got connection and then close
mailserver | Aug 7 08:55:47 mail postfix/smtps/smtpd[1391]: connect from ppp-171-97-99-32.revip8.asianet.co.th[171.97.99.32]
mailserver | Aug 7 08:55:55 mail postfix/postscreen[1405]: CONNECT from [182.43.254.122]:55648 to [172.20.0.2]:25
mailserver | Aug 7 08:55:55 mail postfix/postscreen[1405]: PREGREET 11 after 0.1 from [182.43.254.122]:55648: EHLO User\r\n
mailserver | Aug 7 08:55:56 mail postfix/postscreen[1405]: DISCONNECT [182.43.254.122]:55648
Currently that one is work.
smtp.
imap
So this docker is not secure at all.
About this issue
- Original URL
- State: closed
- Created a year ago
- Comments: 18 (8 by maintainers)
Try add new email account to
thunderbirdsuccess
imapI am be able to fetch email through secure connection. β
smtpthunderbird is sending and stale
containersmpt 465 SSL
Thunderbird sending screen and stale.
containersmtp 587 STARTTLS β
containersmtp 587 SSL. No need to check. I got secure connection already.
@polarathene Thank you very much. I have secure connection for send/receive now. You are awesome π
I connected to your server and indeed,
STARTTLSisnβt offered for 143/587. Is there any reverse proxy/firewall in place?Please try to connect within the container:
The server should response with something similar to:
220 mail.elcolie.com.Then enter
ehlo foo. Now the server should list its features. Verify if βSTARTTLSβ is included.Enter
quitto exit.