roundcube install help

Hi all,
Having trouble with a roundcube install on a different webserver than the mailserver. both servers are VMs on a main kvm server.
webserver IP 192.168.1.18
mailserver IP 192.168.1.17
I am using the roundcube installer roundcube version1..4.1. Ubuntu18.04 for all servers, nginx for webserver, dovecot,postfix for mailserver.
I have 2 domains being served from the mail server.
This is my config.inc.php file:

Code:

<?php
$config['db_dsnw'] = 'mysql://user:pass@localhost/roundcube_db';
$config['default_host'] = 'ssl://mail.example1.com';
$config['username_domain'] = 'example1.com, example2.com'';
$config['default_port'] = 993;

$config['smtp_server'] = '%h';

$config['des_key'] = 'XXXXXXXXXXXXXXXXXXXXXXXX';

$config['product_name'] = 'Webmail';

$config['plugins'] = array();

$config['language'] = 'en_US';

$config['spellcheck_engine'] = 'atd';

$config['prefer_html'] = false;

$config['draft_autosave'] = 180;

$config['mime_param_folding'] = 0;

roundcube refuses to connect to the mailserver:

Code:

Connecting to ssl://mail.example1.com...
IMAP connect:  NOT OK(Login failed for [email protected] against mail.example1.com from 192.168.1.1. Could not connect to ssl://mail.example1.com:993: Unknown reason)

All my other email clients connect with no issues, both inside and outside network. I use ports 993 & 587 to communicate with the mailserver with all the clients

 

What does the dovecot log on the mail server tell you when trying to log in? Have you tried with StartTLS on port 143?

Have you tried to anonymize that or is this the wrong IP? Does mail.example1.com resolve to your mailserver?

 

Hi, Thank you
All the other mail clients use mail.example1.com and use ports 993 & 587. Thunderbird, Evolution, K-9, Rainloop, Nextcloud are all connected using the mail.example1.com:993 credentials.
No errors are showing up on dovecot server logs
192.168.1.1 is not anonymized, that is the error, dovecot located at 192.168.1.17.

 

Is 'something' showing up in the log? (is roundcube connecting to the server?) -> Can the two servers talk to each other?
If the IP in the error is wrongly 192.168.1.1 (is this your host?) than it looks like some dns is wrong.
- Try using the IP instead of the domain for connection.
- Test dns resolver (dig)
- Does ping work between servers?

Do you get more information (in RC config.inc) with

Code:

$config['debug_level'] = 4;

// Log IMAP conversation
$config['imap_debug'] = true;

 

Hi, Thank you so far for helping me.
The dovecot log shows only the last few times I restarted dovecot, no sign that roundcube is trying to connect:
I don't know how to test dns internally, but both ssllabs.com and mxtoolbox.com resolves the mailserver correctly from outside

ffrom the errors.log:
From the imap.log:
I still don't know why the gateway IP 192.168.1.1 is showing up...........

 

So, it looks like something on the network is failing to connect (do you have a firewall installed on the server?), is dovecot listening to the internal IPs?
Can you try from the webserver with

Code:

openssl s_client -showcerts -connect 192.168.1.17:993

That is a different error message, isn't it?

With the "dig" command, however, if pinging works with the hostname that should be fine

Yes, but they resolve to the public IP, not the internal (192.168.1.17), right?

It could be the client connected to the webserver

 

Hi, Thank you again for sticking with me.
The mailserver has UFW installed, ports are all open
thats true about ssllanbs and mxtoolbox, forgot about that,
That is the same error message that I get from roundcube webGUI when I try to connect
Here is the webserver result:
It is supposed to show Letsencrypt as a cert, I installed letsencrypt and it installed correctly with certbot

 

Have you restarted the server (at least dovecot) after installing the certificate?
Roundcube needs additional settings to work with self signed certificates, see bottom of https://github.com/roundcube/roundcubemail/wiki/FAQ

Best would be to get the LetsEncrypt certificate working

 

Hi Steini86
Thank you so much for your assistance
It started working properly once I got letsencrypt to install properly on the mailserver
Cannot thank you enough
Regards