Cannot connect using ssl (iphone email error)

[ccheath]

yeah totally makes sense… not sure why smtps says closed there … should be open…

[ccheath]

ok we are making progress…
i get the confirm cert message from the iphone now
but it still says it cannot connect with ssl after that

[ccheath]

i can’t figure out what’s going on with smtps (port 465) being closed…
i used firewallD to allow the service, should i try and specify the port too?

edit: also why do i get the message to allow the cert (like a self signed cert)

[ccheath]

$sudo firewall-cmd --permanent --zone=public --add-port=465/tcp

adding the port did not work either
still showing closed with nmap

[JuergenAuer]

Hi @ccheath

checking your domain your port 993 has the wrong certificate - https://check-your-website.server-daten.de/?q=mail.eyethrees.net#connections

You have two certificates - one old without mail.eyethrees.net, one new with that domain name.

And your port 995 / POP3 encrypted is closed. See the port check part.

PS: Your port 465 (SMTP encrypted) is closed too.

[ccheath]

thanks for the response @JuergenAuer

i will add the 995 port too, thanks

what can be done about the old cert?
when i run certbot certificates i only get the one correct cert to show up

edit: also i’m not sure what to do about 465 not opening up… any ideas?

[ccheath]

so adding
smtps inet n - y - - smtpd
to /etc/postfix/master.cf opened up port 465

[ccheath]

still getting the ‘cannot connect using ssl’ on the iphone

[ccheath]

making more progress

added to changed dovecot config file 10-master.conf’s service auth section’s unix_listener to /var/spool/postfix/private/auth

sending mail is working fine now but imap incoming and folder syncing isn’t quite working … looks like thunderbird is trying to connect to imap.eyethrees.net even though i’ve changed it to mail.eyethrees.net in the settings

[ccheath]

and that seemed to do it… iphone sending and receiving emails now!!
phew