Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 90419 - Cyrus: POP3 only works from localhost, POP3S, IMAP, IMAPS work from everywhere
Summary: Cyrus: POP3 only works from localhost, POP3S, IMAP, IMAPS work from everywhere
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: x86 Linux
: High major
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-04-25 12:28 UTC by Alexander Czernay
Modified: 2005-05-04 01:39 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Czernay 2005-04-25 12:28:55 UTC
I emerged cyrus-imapd (tried 2.2.12 and 2.2.12-r1) on a Gentoo-2.6.11-hardened-r1 system. No errors during emerge. Connected with Postfix and Amavis.

POP3-SSL, IMAP and IMAP-SSL protocols al work like a charm. Only POP3 is only accessible from localhost. This is reproduceble even when moving to another port (tried 12345). netstat -tnlp gives correct 0.0.0.0:110/0.0.0.0:* master listening, should be ok. I also tried to disable the firewall (Shorewall, configured to allow POP3(S)/IMAP(S) through standard scripts), that also doesn't work.

Reproducible: Always
Steps to Reproduce:
1. Emerge cyrus-imapd and cyrus-sasl
2. saslpasswd2 -c cyrus
3. Start cyrus-imapd
4. su - cyrus
5. cyradm --server=localhost --auth=plain
6. cm user.test
7. exit
8. telnet localhost 110 (this should work)
9. telnet your.server 110 (this should give the error, run from another machine)
Actual Results:  
No connection to POP3 possible, only from localhost. POP3S, IMAP(S) all work
perfectly well.

Expected Results:  
Give access via POP3 even from other machines.

Portage 2.0.51.19 (hardened/x86/2.6, gcc-3.3.5-20050130,
glibc-2.3.4.20041102-r1, 2.6.11-hardened-r1 i686)
=================================================================
System uname: 2.6.11-hardened-r1 i686 Intel(R) Pentium(R) 4 CPU 3.06GHz
Gentoo Base System version 1.4.16
Python:              dev-lang/python-2.3.4-r1 [2.3.4 (#1, Apr  8 2005, 13:49:18)]
ccache version 2.3 [enabled]
dev-lang/python:     2.3.4-r1
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.8.5-r3, 1.5, 1.7.9-r1, 1.6.3, 1.4_p6, 1.9.4
sys-devel/binutils:  2.15.92.0.2-r7
sys-devel/libtool:   1.5.14
virtual/os-headers:  2.6.8.1-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe -fstack-protector"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe -fstack-protector"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distlocks sandbox strict"
GENTOO_MIRRORS="ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage//packages/x86/"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="apache2 berkdb crypt curl curlwrappers dba dlloader exif fastcgi ftp gd
geoip gif gpm hal hardened imagemagick imap innodb ithreads java jikes jpeg
junit kerberos krb4 ldap libwww mbox mime mmx mp3 mpeg mysql ncurses nls nptl
nptlonly pam pcre pdflib perl php pic pie png posix prelude python readline sasl
slang soap spl sse ssl svg svga symlink tcpd tidy tiff tokenizer truetype
unicode userlocales vhosts wddx wmf x86 xml xml2 xmlrpc xsl zlib"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS
Comment 1 Benjamin Smee (strerror) (RETIRED) gentoo-dev 2005-04-25 13:05:00 UTC
This is some issue on your end as I run this precise setup with full pop / pops / imap / imaps with no problems at all. I would suggest double checking your firewall / packet dumping while trying the connection.
Comment 2 Tuan Van (RETIRED) gentoo-dev 2005-04-30 11:46:58 UTC
check if you've emerged cyrus-imapd with "tcpd" USE flag? You need to add pop3 to /etc/hosts.allow if you have. man 5 hosts.allow for usage. Please post your mail log show any error when you connect to your POP3 server along with `emerge cyrus-imapd -vp`
Comment 3 Alexander Czernay 2005-05-04 01:39:20 UTC
Thanks for your help and hints! 

After fiddeling around with all the stuff, I finally found that it must be a bug inside the Shorewall firewall scripts, that doesn't open port 110 even if asked to and not clearing all the firewall rules with 'shorewall stop' - instead a 'shorewall clear' did the magic. I'll file a bug with Shorewall.

@Tuan Van: Cyrus is compiled with tcpd, but all works fine without a hosts.allow file.

Sorry for wasting your time.