www.ritlabs.com [Topic: encrypted SMTPing with TheBat] http://www.ritlabs.com New posts in encrypted SMTPing with TheBat of forum at www.ritlabs.com [www.ritlabs.com] en http://backend.userland.com/rss2 Fri, 06 Oct 2006 18:45:52 +0300 encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
In order to authenticate yourself with the SMTP server you need to exchange user name and password.
When you're doing that over an unsecure connection you can choose to encrypt your user name and password (using MD5), that's what's meant with 'secure authentication'.
However you're using a secure connection, so it has no real value to encrypt your credentials
06 October 2006 18:45:52, Roelof Otten.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14119/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14119/ Fri, 06 Oct 2006 18:45:52 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
blah... i've turned off "Require secure auth" in "Authentication" settings for SMTP and it started to work. can someone explain me what does that "secure auth" means?
06 October 2006 09:58:06, ilya zharinov.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14117/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14117/ Fri, 06 Oct 2006 09:58:06 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
http://www.ietf.org/rfc/rfc2246.txt

====code==== 
3. Goals of this document 
 
   This document and the TLS protocol itself are based on the SSL 3.0 Protocol Specification as published by Netscape. The differences between this protocol and SSL 3.0 are not dramatic, but they are significant enough that TLS 1.0 and SSL 3.0 do not interoperate  (although TLS 1.0 does incorporate a mechanism by which a TLS implementation can back down to SSL 3.0). This document is intended primarily for readers who will be implementing the protocol and those doing cryptographic analysis of it. The specification has been written with this in mind, and it is intended to reflect the needs of those two groups. For that reason, many of the algorithm-dependent data structures and rules are included in the body of the text (as opposed to in an appendix), providing easier access to them.  
   This document is not intended to supply any details of service definition nor interface definition, although it does cover select areas of policy as they are required for the maintenance of solid security.
=============
06 October 2006 00:13:20, Sebastian Murawski.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14113/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14113/ Fri, 06 Oct 2006 00:13:20 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
I checked 3.65.4 (a beta) that didn't have SSL available.

Don't bother checking a regular connection, I just checked the results when you're running TLS and StartTLS against a port that only supports regular, that gives something like:
5-10-2006, 00:01:00: SEND  - Initiating TLS handshake
5-10-2006, 00:01:00: SEND  - connection finished - 0 messages sent
or (with StartTLS):
!5-10-2006, 00:00:04: SEND  - Server reports error. The response is: unknown command, expected MAIL
!5-10-2006, 00:00:04: SEND  - Server reports it is not ready, reply: "unknown command, expected MAIL"

So we should look somewhere else.  
05 October 2006 02:24:29, Roelof Otten.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14103/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14103/ Thu, 05 Oct 2006 02:24:29 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
pfff... strange that i don't see it either in 3.85... i remember seeing it in 3.65, which i had just recently replaced by 3.85. well but anyway, i might be wrong =).

i don't use any proxy. regular SMTP is closed long ago, but i will try tomorrow, it's a good point to seeing the difference. reinstalling is also a good point.

the messages are as is, i just copied them from the log.

what can the message "TLS protocol error" mean i wander?
04 October 2006 22:55:27, ilya zharinov.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14102/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14102/ Wed, 04 Oct 2006 22:55:27 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
What version of TB are you using? (Mine doesn't offer SSL for POP3 or SMTP, only regular (unsecure), StartTLS and TLS)
Are you using anything like a proxy for outgoing mail?
Are the error messages of TB preceded with 'Server reports:'?
There are lots of people using The Bat! and Gmail and that requires a proper functioning of SMTP over TLS, so it's supposed to work.
Did you try to install TB again? (Something could have gone corrupt.)
What response do you get when you try a regular SMTP connection to port 25?

04 October 2006 21:33:44, Roelof Otten.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14101/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14101/ Wed, 04 Oct 2006 21:33:44 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
SMTP is the tip off - Check and see if things like "secure" are checked or unchecked as needed. Same with authentication.

You may be real good at configuring but this stuff can slip by. TLS works fine with Gmail so I wouldn't be TOO quick to to blame The Bat in this case :-)

Mr. Zharinov

====quote====
and well it seemes that your beleif is wrong as even in TB SSL and TLS are different types of protocols for POP3 (you can easily see it when configuring the account).
=============

Where is SSL? I have "regular" "TLS" and "STARTTLS"
Thanks
Rick
04 October 2006 21:31:44, Rick G.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14100/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14100/ Wed, 04 Oct 2006 21:31:44 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
the default port is the port that is specified by the server and not some abstract fixed port. our mail server has TLS configured over 25 and 2525 ports. and as thousand of other people can use TLS over those ports to send mails under outlook and thunderbird, then i can basically suppose that TB is not so flawless as you say :P.

and well it seemes that your beleif is wrong as even in TB SSL and TLS are different types of protocols for POP3 (you can easily see it when configuring the account).

anyway, that doesn't answer my questions: how come that TB works with secure POP3 and does not with SMTP given the same credentials (i am sure that there's something wrong with TB or with my configuring it, see above why)?
04 October 2006 19:59:48, ilya zharinov.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14099/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14099/ Wed, 04 Oct 2006 19:59:48 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
TB is supposed to run flawlessly with TLS, the default port for TLS is 465, are you sure you shouldn't use that?

As for your last question, I've always believed that SSL end TLS are two names for the same protocol, though some sources on the net are saying something else. However, when you've got POP3 over TLS running, I can't imagine that your server should use a different security protocol for SMTP (TB only offers TLS).
04 October 2006 19:02:43, Roelof Otten.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14098/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14098/ Wed, 04 Oct 2006 19:02:43 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
and one more thing: why TheBat doen't support SMTPing through SSL?
04 October 2006 11:57:05, inge.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14095/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14095/ Wed, 04 Oct 2006 11:57:05 +0300 The Bat! - Configuring the E-mail Client encrypted SMTPing with TheBat encrypted SMTPing with TheBat TLS problems in forum The Bat! - Configuring the E-mail Client.
so the problem basically is that TheBat fails to smtp through our TLS (regardless of using STARTTLS or TLS).

so saying that i am specified the following:

POP: _server_ - port: 995 - SSL - login/password
SMTP: server_ - port: 25 or 2525 - TLS - same login/password and a valid sender address

(a valid sender address means that the server will accept only the mail from certain addresses)

so how can i configure TheBat for it to work? i couldn't manage to do that, i just receive either "TLS protocol error: Unknown Message SessionUnknownContentType ct (50)" or "5.7.3 Client has no permission to submit mail to this server" while pop3 connection through TLS works perfect.
04 October 2006 11:44:20, inge.]]> http://www.ritlabs.com/en/forums/forum4/topic3635/message14094/ http://www.ritlabs.com/en/forums/forum4/topic3635/message14094/ Wed, 04 Oct 2006 11:44:20 +0300 The Bat! - Configuring the E-mail Client