1

Topic: Roundcube works fine but blocked in thunderbird

Hi, my problem is blocking auth in thunderbird (or other mail client).
I have one public ip, few physical servers and lot of hyper-v virtualized machines. Im using nginx proxy manager for reverse proxy. iRedMail is already installed on new physical machine. Everything is working  properly in roundcube, but when i try to connect with thunderbird im getting error. If i leave this for an hour, first login and the first email will be sent correctly, but subsequent emails will be blocked. Here is log:


Apr 28 18:57:45 mail postfix/submission/smtpd[4836]: connect from unknown[46.205.140.21]
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: improper command pipelining after EHLO from unknown[46.205.140.21]: QUIT\r\n
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: discarding EHLO keywords: CHUNKING
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: disconnect from unknown[46.205.140.21] ehlo=1 quit=1 commands=2
Apr 28 18:57:45 mail postfix/submission/smtpd[4832]: warning: hostname 46.205.140.21.mobile.internet.t-mobile.pl does not resolve to address 46.205.140.21: Name or service not known
Apr 28 18:57:45 mail postfix/submission/smtpd[4832]: connect from unknown[46.205.140.21]
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: warning: hostname 46.205.140.21.mobile.internet.t-mobile.pl does not resolve to address 46.205.140.21: Name or service not known
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: connect from unknown[46.205.140.21]
Apr 28 18:57:45 mail postfix/smtps/smtpd[4811]: SSL_accept error from unknown[46.205.140.21]: -1
Apr 28 18:57:45 mail postfix/smtps/smtpd[4811]: warning: TLS library problem: error:0A000412:SSL routines::sslv3 alert bad certificate:../ssl/record/rec_layer_s3.c:1584:SSL alert number 42:
Apr 28 18:57:45 mail postfix/smtps/smtpd[4811]: lost connection after CONNECT from unknown[46.205.140.21]
Apr 28 18:57:45 mail postfix/smtps/smtpd[4811]: disconnect from unknown[46.205.140.21] commands=0/0
Apr 28 18:57:45 mail postfix/submission/smtpd[4836]: improper command pipelining after EHLO from unknown[46.205.140.21]: QUIT\r\n
Apr 28 18:57:45 mail postfix/submission/smtpd[4836]: discarding EHLO keywords: CHUNKING
Apr 28 18:57:45 mail postfix/submission/smtpd[4836]: disconnect from unknown[46.205.140.21] ehlo=1 quit=1 commands=2
Apr 28 18:57:45 mail postfix/submission/smtpd[4832]: discarding EHLO keywords: CHUNKING
Apr 28 18:57:45 mail postfix/submission/smtpd[4832]: disconnect from unknown[46.205.140.21] ehlo=1 quit=1 commands=2
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: discarding EHLO keywords: CHUNKING
Apr 28 18:57:45 mail postfix/submission/smtpd[4809]: disconnect from unknown[46.205.140.21] ehlo=1 quit=1 commands=2
Apr 28 18:58:25 mail postfix/submission/smtpd[4837]: warning: hostname 46.205.140.21.mobile.internet.t-mobile.pl does not resolve to address 46.205.140.21: Name or service not known
Apr 28 18:58:25 mail postfix/submission/smtpd[4837]: connect from unknown[46.205.140.21]
Apr 28 18:58:25 mail postfix/submission/smtpd[4837]: discarding EHLO keywords: CHUNKING
Apr 28 18:58:26 mail postfix/submission/smtpd[4837]: Anonymous TLS connection established from unknown[46.205.140.21]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-sign>Apr 28 18:58:26 mail postfix/submission/smtpd[4837]: discarding EHLO keywords: CHUNKING
Apr 28 18:58:34 mail postfix/submission/smtpd[4837]: warning: unknown[46.205.140.21]: SASL PLAIN authentication failed:
Apr 28 18:58:41 mail postfix/submission/smtpd[4837]: warning: unknown[46.205.140.21]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 28 18:58:43 mail postfix/submission/smtpd[4837]: lost connection after AUTH from unknown[46.205.140.21]
Apr 28 18:58:43 mail postfix/submission/smtpd[4837]: disconnect from unknown[46.205.140.21] ehlo=2 starttls=1 auth=0/2 commands=3/5
Apr 28 19:00:22 mail postfix/submission/smtpd[4837]: warning: hostname 46.205.140.21.mobile.internet.t-mobile.pl does not resolve to address 46.205.140.21: Name or service not known
Apr 28 19:00:22 mail postfix/submission/smtpd[4837]: connect from unknown[46.205.140.21]
Apr 28 19:00:22 mail postfix/submission/smtpd[4837]: discarding EHLO keywords: CHUNKING
Apr 28 19:00:23 mail postfix/submission/smtpd[4837]: Anonymous TLS connection established from unknown[46.205.140.21]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-sign>Apr 28 19:00:23 mail postfix/submission/smtpd[4837]: discarding EHLO keywords: CHUNKING
Apr 28 19:00:26 mail postfix/submission/smtpd[4837]: warning: unknown[46.205.140.21]: SASL PLAIN authentication failed:
Apr 28 19:00:32 mail postfix/submission/smtpd[4837]: warning: unknown[46.205.140.21]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 (edited by Cthulhu 2024-04-29 21:03:26)

Re: Roundcube works fine but blocked in thunderbird

SASL LOGIN authentication failed: UGFzc3dvcmQ6

This means password is wrong, and the IP gets banned by fail2ban