[Virtualmin and Webmin] Postfix Mail Server Cannot Receive Email At All
Subject: [Virtualmin and Webmin] Postfix Mail Server Cannot Receive Email At All
Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL)
Country: Singapore
Date: 21 Oct 2021 Thursday Singapore Time
Type of Publication: Plain Text
Document Version: 20211021.01
Good day from Singapore,
========================
Initially Postfix SMTP server is not listening. So I did the following.
Login to Virtualmin.
Click Webmin at the top left.
Click Servers > Postfix Mail Server
Click Stop Postfix
Click Start Postfix
Click Reload Configuration
Now Postfix SMTP server is listening successfully.
But then there is another problem. Cannot STARTTLS. postfix/smtpd[4411]: warning: No server certs available. TLS won't be enabled
You can see below that STARTTLS won't work because there are no SSL certificates for Postfix.
telnet mail.turritopsis-dohrnii-teo-en-ming.com 25
===================================================
220 vmi696121.contaboserver.net ESMTP Postfix
ehlo test
250-vmi696121.contaboserver.net
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
starttls
454 4.7.0 TLS not available due to local problem
tail -f /var/log/maillog
=========================
Oct 21 12:20:59 vmi696121 postfix/smtpd[4411]: warning: No server certs available. TLS won't be enabled
Oct 21 12:20:59 vmi696121 postfix/smtpd[4411]: connect from mail-pf1-f172.google.com[209.85.210.172]
Oct 21 12:21:00 vmi696121 postfix/smtpd[4411]: lost connection after STARTTLS from mail-pf1-f172.google.com[209.85.210.172]
Oct 21 12:21:00 vmi696121 postfix/cleanup[4412]: 1B05AB2010D: message-id=<20211021102100.1B05AB2010D@vmi696121.contaboserver.net>
Oct 21 12:21:00 vmi696121 postfix/smtpd[4411]: disconnect from mail-pf1-f172.google.com[209.85.210.172]
Oct 21 12:21:00 vmi696121 postfix/qmgr[1987]: 1B05AB2010D: from=<double-bounce@vmi696121.contaboserver.net>, size=989, nrcpt=1 (queue active)
Oct 21 12:21:00 vmi696121 postfix/local[4414]: 1B05AB2010D: to=<root@vmi696121.contaboserver.net>, orig_to=<postmaster>, relay=local, delay=0.18, delays=0.02/0.01/0/0.15, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME)
Oct 21 12:21:00 vmi696121 postfix/qmgr[1987]: 1B05AB2010D: removed
THE SOLUTION
============
Reference Guide: Steps to create SSL for SMTP?
Link: https://archive.virtualmin.com/node/16747
Login to Virtualmin.
Click Server Configuration > SSL Certificate
Current Certificate > Current SSL certificate details
======================================================
SSL certificate file /home/turritopsis-dohrnii-teo-en-ming/ssl.cert
SSL private key file /home/turritopsis-dohrnii-teo-en-ming/ssl.key
Web server hostname turritopsis-dohrnii-teo-en-ming.com Issuer name R3
Issuer organization Let's Encrypt Expiry date Jan 17 12:59:35 2022 GMT
Certificate type Signed by CA
Other domain names admin.turritopsis-dohrnii-teo-en-ming.com, mail.turritopsis-dohrnii-teo-en-ming.com, turritopsis-dohrnii-teo-en-ming.com, webmail.turritopsis-dohrnii-teo-en-ming.com, www.turritopsis-dohrnii-teo-en-ming.com.
Used by services Webmin (turritopsis-dohrnii-teo-en-ming.com), Usermin (host turritopsis-dohrnii-teo-en-ming.com), Dovecot (host turritopsis-dohrnii-teo-en-ming.com)
Download certificate
Download private key
Time until expiry 88 days until expiry
Click Set as Default Services Certificate > Use this SSL certificate as the default in Webmin, Usermin, Dovecot, Postfix and ProFTPD
Copy SSL Certificate
====================
In domain turritopsis-dohrnii-teo-en-ming.com
Copying certificate and key to /etc/webmin ..
.. done
Configuring Webmin to use them ..
.. done
Copying certificate and key to /etc/usermin ..
.. done
Configuring Usermin to use them ..
.. done
Copying certificate and key to Dovecot files ..
.. wrote out certificate and CA in /etc/pki/dovecot/certs/dovecot.pem, and key in /etc/pki/dovecot/private/dovecot.pem
Enabling SSL in Dovecot configuration ..
.. done
Copying certificate, key and CA to Postfix files ..
.. wrote out certificate in /etc/postfix/postfix.cert.pem and key in /etc/postfix/postfix.key.pem
Enabling SSL in Postfix configuration ..
.. done
Copying certificate, key and CA to ProFTPD files ..
.. wrote out certificate in /etc/pki/tls/certs/proftpd.pem and key in /etc/pki/tls/private/proftpd.pem
Enabling SSL in ProFTPD configuration ..
.. done
Applying FTP server configuration ..
.. done
telnet mail.turritopsis-dohrnii-teo-en-ming.com 25
==================================================
220 vmi696121.contaboserver.net ESMTP Postfix
ehlo test
250-vmi696121.contaboserver.net
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
starttls
220 2.0.0 Ready to start TLS
Testing
========
telnet mail.turritopsis-dohrnii-teo-en-ming.com 25: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 465: FAILED
telnet mail.turritopsis-dohrnii-teo-en-ming.com 587: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 110: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 143: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 993: FAILED
telnet mail.turritopsis-dohrnii-teo-en-ming.com 995: FAILED
Conclusion: Able to receive emails successfully
Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 21 Oct 2021, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a Systems Integrator (SI)/computer firm in Singapore. He is an IT enthusiast.
REFERENCES
===========
[1] https://sourceforge.net/p/webadmin/mailman/message/37370775/
Comments
Post a Comment