1 Topic by auroralabs

  • auroralabs
  • Member
  • Offline
  • Registered: 2016-02-10
  • Posts: 14

Topic: Port 993 Timeout Question

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.4
- Linux/BSD distribution name and version: CentOS 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache 2.4
- Manage mail accounts with iRedAdmin-Pro? No
- Related log if you're reporting an issue:
====

Hi I have a local machine that cannot connect to iRedMail using port 993. Externally all is good as I have a mail account set up however internally it either connects or fails with atimeout.

First Attempt
| => openssl s_client -crlf -connect iredmail.xxxx-ms.net:993
CONNECTED(00000003)

Next Attempt same client
| => openssl s_client -crlf -connect iredmail.xxxx-ms.net:993
connect: Operation timed out
connect:errno=60

Can anyone suggest how I would go about trying to resolve or trace this issue as nothing is showing up in the logs. To my knowledge both machines have port 993 open.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Port 993 Timeout Question

Please make sure your client IP address is not blocked in iptables.

3 Reply by auroralabs

  • auroralabs
  • Member
  • Offline
  • Registered: 2016-02-10
  • Posts: 14

Re: Port 993 Timeout Question

HI,

No IP Blocked that i can see and the ports are accepting connections..



-A FORWARD_IN_ZONES -i eno16777736 -g FWDI_iredmail
-A FORWARD_IN_ZONES -g FWDI_iredmail
-A FORWARD_OUT_ZONES -o eno16777736 -g FWDO_iredmail
-A FORWARD_OUT_ZONES -g FWDO_iredmail
-A FWDI_iredmail -j FWDI_iredmail_log
-A FWDI_iredmail -j FWDI_iredmail_deny
-A FWDI_iredmail -j FWDI_iredmail_allow
-A FWDO_iredmail -j FWDO_iredmail_log
-A FWDO_iredmail -j FWDO_iredmail_deny
-A FWDO_iredmail -j FWDO_iredmail_allow
-A INPUT_ZONES -i eno16777736 -g IN_iredmail
-A INPUT_ZONES -g IN_iredmail
-A IN_iredmail -j IN_iredmail_log
-A IN_iredmail -j IN_iredmail_deny
-A IN_iredmail -j IN_iredmail_allow
-A IN_iredmail_allow -p tcp -m tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 995 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 25 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 143 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 110 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 443 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 993 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 2525 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 587 -m conntrack --ctstate NEW -j ACCEPT
-A IN_iredmail_allow -p tcp -m tcp --dport 10110 -m conntrack --ctstate NEW -j ACCEPT

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Port 993 Timeout Question

*) Is IMAPS service (port 993) running on your server? Check Dovecot config file please.
*) Can other users connect to server via port 993? And from other laptop/pc/mac?

5 Reply by auroralabs

  • auroralabs
  • Member
  • Offline
  • Registered: 2016-02-10
  • Posts: 14

Re: Port 993 Timeout Question

Hi,

Yes it is

I can access the service and connect from an external Machine running a PHP application.
I can access the service from an email client on another workstation on an external machine.

The only time I cannot access 993 is between the 2 Servers on the same internal network 10.23.0.101 & 102 .
Possibly some issue with our Router

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Port 993 Timeout Question

It's a network issue, maybe improper firewall rules, please check your network devices like firewall, router, etc.