IMAP connection refused

Question

I am running Postfix and Dovecot using IMAP and SSL using unix accounts. When running openssl s_client -connect localhost:993 I get an error message Connection Refused, Errno 111.

Using telnet mail.example.com 25 and 587 return the correct responses.

I flushed iptables so it's empty with default ACCEPT. Any idea what to check?

dovecot -n

passdb {
  driver = pam
}
protocols = imap

service auth {
  unix_listener  /var/spool/postfix/private/auth {
  group = postfix
  mode = 0660
  user = postfix
  }
}

service imap-login {
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}

ssl_cert = /path/to/cert
ssl_key = /path/to/cert
userdb {
  driver = passwd
}

Using Dovecot 2.x

Is anything actually listening on 993? – EEAA Sep 21 '15 at 21:01 — EEAA, Sep 21 '15 at 21:01
yes, dovecot is listening on 993 – exxboast7 Sep 22 '15 at 15:57 — exxboast7, Sep 22 '15 at 15:57
How sure are you of that? How have you checked this? – EEAA Sep 22 '15 at 15:59 — EEAA, Sep 22 '15 at 15:59
Yes, using netstat -tunlp | grep :993 – exxboast7 Sep 22 '15 at 19:15 — exxboast7, Sep 22 '15 at 19:15

score 1 · Answer 1 · answered Sep 21 '15 at 23:20

1

protocols = imap imaps

Source http://wiki.dovecot.org/SSL/DovecotConfiguration

answered Sep 21 '15 at 23:20

Jacob Evans

7,886
3
29
57

When I used imaps, dovecot told me this was no longer used and to use imap instead in the errors. – exxboast7 Sep 22 '15 at 15:04
next time put in specifics, if you are using 2.x put 2.x http://wiki2.dovecot.org/SSL/DovecotConfiguration – Jacob Evans Sep 22 '15 at 15:16

user9517 · Answer 2 · 2015-09-22T17:31:56.693

0

Connection Refused generally means nothing is listening on the relevant IP:Port combination. Use netstat to confirm

netstat -tunlp | grep :993

take appropriate action depending on what you find.

edited Sep 22 '15 at 17:31

answered Sep 21 '15 at 22:06

user9517

115,471
20
215
297

Dovecot is not listening on 993. If I comment ssl = required, then dovecot listens on :143. Not sure what I'm missing to get it working with 993. – exxboast7 Sep 22 '15 at 15:13
After commenting ssl = required in 10-ssl.conf it now listens on 993. – exxboast7 Sep 22 '15 at 15:35
Ok, the issue was the SSL key file was in the wrong directory. Now I got 993 listening but I'm getting authentication errors when trying to login. – exxboast7 Sep 22 '15 at 15:46

IMAP connection refused

2 Answers2