[webmin-l] [Virtualmin and Webmin] Postfix Mail Server Cannot Receive Email At All

[Turritopsis D. T. En M. <ceo...@gm...>]

Subject: [Virtualmin and Webmin] Postfix Mail Server Cannot Receive Email At All

Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL)
Country: Singapore
Date: 21 Oct 2021 Thursday Singapore Time

Type of Publication: Plain Text
Document Version: 20211021.01

Good day from Singapore,
========================

Initially Postfix SMTP server is not listening. So I did the following.

Login to Virtualmin.

Click Webmin at the top left.

Click Servers > Postfix Mail Server

Click Stop Postfix

Click Start Postfix

Click Reload Configuration

Now Postfix SMTP server is listening successfully.

But then there is another problem. Cannot STARTTLS.
postfix/smtpd[4411]: warning: No server certs available. TLS won't be
enabled

You can see below that STARTTLS won't work because there are no SSL
certificates for Postfix.

telnet mail.turritopsis-dohrnii-teo-en-ming.com 25
===================================================

220 vmi696121.contaboserver.net ESMTP Postfix
ehlo test
250-vmi696121.contaboserver.net
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
starttls
454 4.7.0 TLS not available due to local problem

tail -f /var/log/maillog
=========================

Oct 21 12:20:59 vmi696121 postfix/smtpd[4411]: warning: No server
certs available. TLS won't be enabled
Oct 21 12:20:59 vmi696121 postfix/smtpd[4411]: connect from
mail-pf1-f172.google.com[209.85.210.172]
Oct 21 12:21:00 vmi696121 postfix/smtpd[4411]: lost connection after
STARTTLS from mail-pf1-f172.google.com[209.85.210.172]
Oct 21 12:21:00 vmi696121 postfix/cleanup[4412]: 1B05AB2010D:
message-id=<202...@vm...>
Oct 21 12:21:00 vmi696121 postfix/smtpd[4411]: disconnect from
mail-pf1-f172.google.com[209.85.210.172]
Oct 21 12:21:00 vmi696121 postfix/qmgr[1987]: 1B05AB2010D:
from=<dou...@vm...>, size=989, nrcpt=1
(queue active)
Oct 21 12:21:00 vmi696121 postfix/local[4414]: 1B05AB2010D:
to=<ro...@vm...>, orig_to=<postmaster>,
relay=local, delay=0.18, delays=0.02/0.01/0/0.15, dsn=2.0.0,
status=sent (delivered to command: /usr/bin/procmail-wrapper -o -a
$DOMAIN -d $LOGNAME)
Oct 21 12:21:00 vmi696121 postfix/qmgr[1987]: 1B05AB2010D: removed

THE SOLUTION
============

Reference Guide: Steps to create SSL for SMTP?
Link: https://archive.virtualmin.com/node/16747

Login to Virtualmin.

Click Server Configuration > SSL Certificate

Current Certificate > Current SSL certificate details
======================================================

SSL certificate file /home/turritopsis-dohrnii-teo-en-ming/ssl.cert
SSL private key file /home/turritopsis-dohrnii-teo-en-ming/ssl.key
Web server hostname turritopsis-dohrnii-teo-en-ming.com Issuer name R3
Issuer organization Let's Encrypt Expiry date Jan 17 12:59:35 2022 GMT
Certificate type Signed by CA
Other domain names admin.turritopsis-dohrnii-teo-en-ming.com,
mail.turritopsis-dohrnii-teo-en-ming.com,
turritopsis-dohrnii-teo-en-ming.com,
webmail.turritopsis-dohrnii-teo-en-ming.com,
www.turritopsis-dohrnii-teo-en-ming.com.
Used by services Webmin (turritopsis-dohrnii-teo-en-ming.com), Usermin
(host turritopsis-dohrnii-teo-en-ming.com), Dovecot (host
turritopsis-dohrnii-teo-en-ming.com)
Download certificate
Download private key
Time until expiry 88 days until expiry

Click Set as Default Services Certificate > Use this SSL certificate
as the default in Webmin, Usermin, Dovecot, Postfix and ProFTPD

Copy SSL Certificate
====================

In domain turritopsis-dohrnii-teo-en-ming.com

Copying certificate and key to /etc/webmin ..
.. done
Configuring Webmin to use them ..
.. done
Copying certificate and key to /etc/usermin ..
.. done
Configuring Usermin to use them ..
.. done
Copying certificate and key to Dovecot files ..
.. wrote out certificate and CA in /etc/pki/dovecot/certs/dovecot.pem,
and key in /etc/pki/dovecot/private/dovecot.pem
Enabling SSL in Dovecot configuration ..
.. done
Copying certificate, key and CA to Postfix files ..
.. wrote out certificate in /etc/postfix/postfix.cert.pem and key in
/etc/postfix/postfix.key.pem
Enabling SSL in Postfix configuration ..
.. done
Copying certificate, key and CA to ProFTPD files ..
.. wrote out certificate in /etc/pki/tls/certs/proftpd.pem and key in
/etc/pki/tls/private/proftpd.pem
Enabling SSL in ProFTPD configuration ..
.. done
Applying FTP server configuration ..
.. done

telnet mail.turritopsis-dohrnii-teo-en-ming.com 25
==================================================

220 vmi696121.contaboserver.net ESMTP Postfix
ehlo test
250-vmi696121.contaboserver.net
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
starttls
220 2.0.0 Ready to start TLS

Testing
========

telnet mail.turritopsis-dohrnii-teo-en-ming.com 25: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 465: FAILED
telnet mail.turritopsis-dohrnii-teo-en-ming.com 587: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 110: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 143: SUCCESS
telnet mail.turritopsis-dohrnii-teo-en-ming.com 993: FAILED
telnet mail.turritopsis-dohrnii-teo-en-ming.com 995: FAILED

Conclusion: Able to receive emails successfully

Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 21 Oct 2021,
is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant
with a Systems Integrator (SI)/computer firm in Singapore. He is an IT
enthusiast.





-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's
Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts
at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan
(5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020):

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----