Anyone out there using stunnel with mh?
I'm running an ubuntu jaunty linux distro, and I want to get my local
email working over SSL connections to a gmail account (POP3/SMTP). So
I'm trying to get mh (probably nmh, but gnu mailutils would be okay)
to talk over SSL using stunnel.
I've suceeded in using slypheed to get mail from gmail, so I know the
gmail account is working and is set-up for pop3 and so on. When I
run inc, though, it just reports:
"inc: no servers available"
I can see that I've got stunnel running by doing a:
ps ax | egrep stun | egrep -v egrep
Hm... but now that reports 6 stunnel processes, which doesn't
seem right:
5937 ? SN 0:00 /usr/bin/stunnel4 /etc/stunnel/stunnel.conf
5938 ? SN 0:00 /usr/bin/stunnel4 /etc/stunnel/stunnel.conf
5939 ? SN 0:00 /usr/bin/stunnel4 /etc/stunnel/stunnel.conf
5940 ? SN 0:00 /usr/bin/stunnel4 /etc/stunnel/stunnel.conf
5941 ? SN 0:00 /usr/bin/stunnel4 /etc/stunnel/stunnel.conf
5942 ? SNs 0:00 /usr/bin/stunnel4 /etc/stunnel/stunnel.conf
I'm looking for suggestions on what I might be doing wrong, and
hints on how to go about isolating the problems.
Here's a summary of the kind of configurations I've been trying:
/etc/default/stunnel4:
ENABLED=1
FILES="/etc/stunnel/*.conf"
OPTIONS=""
PPP_RESTART=0
/etc/stunnel/stunnel.conf:
sslVersion = SSLv3
chroot = /var/lib/stunnel4/
setuid = stunnel4
setgid = stunnel4
pid = /stunnel4.pid
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
debug = 7
output = /var/log/stunnel4/stunnel.log
client = yes
[pop3s]
accept = 127.0.0.1:995
connect = pop.gmail.com:110
[smtps]
accept = 127.0.0.1:465
connect = smtp.gmail.com:25
/etc/nmh/mts.conf:
mts: smtp
hostable: /etc/nmh/hosts
localname: smtp.gmail.com
# localname: gmail.com
masquerade:
mmdfldir: /var/mail
mmdflfil:
# pophost: localhost
# pophost: pop.gmail.com:995
pophost: pop.gmail.com:110
# pophost: pop.gmail.com
# servers: localhost
servers: smtp.gmail.com
/var/log/stunnel4/stunnel.log
2010.09.21 11:11:41 LOG7[6528:140533218399984]: Snagged 64 random bytes from /dev/urandom
2010.09.21 11:11:41 LOG7[6528:140533218399984]: RAND_status claims sufficient entropy for the PRNG
2010.09.21 11:11:41 LOG7[6528:140533218399984]: PRNG seeded successfully
2010.09.21 11:11:41 LOG7[6528:140533218399984]: SSL context initialized for service pop3s
2010.09.21 11:11:41 LOG7[6528:140533218399984]: SSL context initialized for service imaps
2010.09.21 11:11:41 LOG7[6528:140533218399984]: SSL context initialized for service smtps
2010.09.21 11:11:41 LOG5[6528:140533218399984]: stunnel 4.22 on x86_64-pc-linux-gnu with OpenSSL 0.9.8g 19 Oct 2007
2010.09.21 11:11:41 LOG5[6528:140533218399984]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
2010.09.21 11:11:41 LOG6[6528:140533218399984]: file ulimit = 1024 (can be changed with 'ulimit -n')
2010.09.21 11:11:41 LOG6[6528:140533218399984]: poll() used - no FD_SETSIZE limit for file descriptors
2010.09.21 11:11:41 LOG5[6528:140533218399984]: 500 clients allowed
2010.09.21 11:11:41 LOG7[6528:140533218399984]: FD 10 in non-blocking mode
2010.09.21 11:11:41 LOG7[6528:140533218399984]: FD 11 in non-blocking mode
2010.09.21 11:11:41 LOG7[6528:140533218399984]: FD 12 in non-blocking mode
2010.09.21 11:11:41 LOG7[6528:140533218399984]: SO_REUSEADDR option set on accept socket
2010.09.21 11:11:41 LOG7[6528:140533218399984]: pop3s bound to 127.0.0.1:1109
2010.09.21 11:11:41 LOG7[6528:140533218399984]: FD 13 in non-blocking mode
2010.09.21 11:11:41 LOG7[6528:140533218399984]: SO_REUSEADDR option set on accept socket
2010.09.21 11:11:41 LOG7[6528:140533218399984]: imaps bound to 0.0.0.0:993
2010.09.21 11:11:41 LOG7[6528:140533218399984]: FD 14 in non-blocking mode
2010.09.21 11:11:41 LOG7[6528:140533218399984]: SO_REUSEADDR option set on accept socket
2010.09.21 11:11:41 LOG7[6528:140533218399984]: smtps bound to 127.0.0.1:259
2010.09.21 11:11:41 LOG7[6534:140533218399984]: Created pid file /stunnel4.pid
/var/log/mail.log
Sep 21 13:40:32 fineline gnu-pop3d[15484]: Incoming connection opened
Sep 21 13:40:32 fineline gnu-pop3d[15484]: connect from 127.0.0.1
Sep 21 13:40:32 fineline gnu-pop3d[15484]: User `doom...@gmail.com': nonexistent
Sep 21 13:40:32 fineline gnu-pop3d[15484]: Session ended for no user
