(02-12-2015 07:11 PM)lingu Wrote:  How can a person apply for a d-thinker email address?

(02-17-2015 10:12 AM)amoners Wrote:  Dr.Gu: What's your opinion?

(03-21-2015 07:02 PM)lingu Wrote:  

(02-17-2015 10:12 AM)amoners Wrote:  Dr.Gu: What's your opinion?

Sounds good to me. This should also apply to mailing lists.

(12-13-2015 11:45 AM)lingu Wrote:  Thunderbird is not happy with mx.d-thinker.org's certificate.

(12-13-2015 03:28 PM)amoners Wrote:  

(12-13-2015 11:45 AM)lingu Wrote:  Thunderbird is not happy with mx.d-thinker.org's certificate.

I can't get point... I thought Zhiqiang use Thunderbird, you may get some experience from him.

(01-13-2016 11:56 PM)lingu Wrote:  

(12-13-2015 03:28 PM)amoners Wrote:  

(12-13-2015 11:45 AM)lingu Wrote:  Thunderbird is not happy with mx.d-thinker.org's certificate.

I can't get point... I thought Zhiqiang use Thunderbird, you may get some experience from him.

is the certificate made for mx.d-thinker.org?

(01-14-2016 08:29 PM)lingu Wrote:  Thunderbird complains weak keys due to the logjam attack -- https://weakdh.org/

The zimbra server should use a stronger key. Otherwise Thunderbird declines to connect to the server to do POP3.

As a workaround, I set the following items to false so that Thunderbird does not tell the server it can use short keys, and this appears to make POP3 work with the server with a weak key.

security.ssl3.dhe_rsa_aes_128_sha;false
security.ssl3.dhe_rsa_aes_256_sha;false

(08-26-2014 05:29 AM)DaY Wrote:  web client address: http://mx.d-thinker.org:9980

mail client configuration:
pop server address: mx.d-thinker.org, port: 995, using SSL authentication

(01-14-2016 09:40 AM)amoners Wrote:  

(01-13-2016 11:56 PM)lingu Wrote:  

(12-13-2015 03:28 PM)amoners Wrote:  

(12-13-2015 11:45 AM)lingu Wrote:  Thunderbird is not happy with mx.d-thinker.org's certificate.

I can't get point... I thought Zhiqiang use Thunderbird, you may get some experience from him.

is the certificate made for mx.d-thinker.org?

I checked certificate, It made for d-thinker.org. Should I correct it?

(12-13-2015 03:28 PM)amoners Wrote:  

(12-13-2015 11:45 AM)lingu Wrote:  Thunderbird is not happy with mx.d-thinker.org's certificate.

I can't get point... I thought Zhiqiang use Thunderbird, you may get some experience from him.

(01-19-2016 10:57 AM)zma Wrote:  

(12-13-2015 03:28 PM)amoners Wrote:  

(12-13-2015 11:45 AM)lingu Wrote:  Thunderbird is not happy with mx.d-thinker.org's certificate.

I can't get point... I thought Zhiqiang use Thunderbird, you may get some experience from him.

I just kept using an old version of nss and thunderbird that can accept mx.d-thinker.org's keys http://tab.d-thinker.org/showthread.php?tid=3484

I came across this https://wiki.zimbra.com/wiki/Disabling_the_use_of_weak_DH_keys_in_Zimbra_Collaboration_mailboxd . We may consider the solution there instead of client-by-client configurations.

Quote:Disabling the insecure ciphers, will make Firefox happy again:

zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_128_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
zmmailboxdctl restart

(01-20-2016 10:16 AM)amoners Wrote:  I found some lines in the linked page. It works, may I do this on d-thinker.org mail server?

Quote:Disabling the insecure ciphers, will make Firefox happy again:

zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_128_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
zmmailboxdctl restart

(01-20-2016 05:27 PM)lingu Wrote:  

(01-20-2016 10:16 AM)amoners Wrote:  I found some lines in the linked page. It works, may I do this on d-thinker.org mail server?

Quote:Disabling the insecure ciphers, will make Firefox happy again:

zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_128_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
zmmailboxdctl restart

OK. It's worth trying. Make sure that 1. you can go back, 2. the down time is short, 3. you test the email system well after the change.

(01-25-2016 10:20 AM)amoners Wrote:  

(01-20-2016 05:27 PM)lingu Wrote:  

(01-20-2016 10:16 AM)amoners Wrote:  I found some lines in the linked page. It works, may I do this on d-thinker.org mail server?

Quote:Disabling the insecure ciphers, will make Firefox happy again:

zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_128_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
zmmailboxdctl restart

OK. It's worth trying. Make sure that 1. you can go back, 2. the down time is short, 3. you test the email system well after the change.

Yes, it can use command of zimbra go back. the down time is short since just need restart service. I have done it before, and it works to me without setting with thunderbird.

(01-12-2017 09:29 PM)zli Wrote:  Updated with Thunderbird tested configurations in headpost.

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password
SMTP:
Server name: mx.d-thinker.org
Port:587
Authentication method: Normal password
Security: STARTTLS

(01-13-2017 04:39 AM)lingu Wrote:  

(01-12-2017 09:29 PM)zli Wrote:  Updated with Thunderbird tested configurations in headpost.

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password
SMTP:
Server name: mx.d-thinker.org
Port:587
Authentication method: Normal password
Security: STARTTLS

This mail domain is used by many users. Pls improve formatting of the info.

(01-13-2017 09:27 AM)zli Wrote:  

(01-13-2017 04:39 AM)lingu Wrote:  

(01-12-2017 09:29 PM)zli Wrote:  Updated with Thunderbird tested configurations in headpost.

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password
SMTP:
Server name: mx.d-thinker.org
Port:587
Authentication method: Normal password
Security: STARTTLS

This mail domain is used by many users. Pls improve formatting of the info.

Okay, I will use a screen capture of the configuration instead.

(01-13-2017 02:30 PM)lingu Wrote:  

(01-13-2017 09:27 AM)zli Wrote:  

(01-13-2017 04:39 AM)lingu Wrote:  

(01-12-2017 09:29 PM)zli Wrote:  Updated with Thunderbird tested configurations in headpost.

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password
SMTP:
Server name: mx.d-thinker.org
Port:587
Authentication method: Normal password
Security: STARTTLS

This mail domain is used by many users. Pls improve formatting of the info.

Okay, I will use a screen capture of the configuration instead.

What I said was formatting not presentation. Please use the following format:

---------
Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password

SMTP:
Server name: mx.d-thinker.org
Port:587
Authentication method: Normal password
Security: STARTTLS
---------------

Just add some bold fonts and blank lines and the format would look better.

(05-23-2019 03:01 PM)wsk Wrote:  In the environment of CentOS 7:
SMTP:
Port: ((587 -> 25))
Or you can't get the configuration right,
I think we can specify this situation in the headpost.

RR xwcwt

(05-23-2019 03:40 PM)xwcwt Wrote:  

(05-23-2019 03:01 PM)wsk Wrote:  In the environment of CentOS 7:
SMTP:
Port: ((587 -> 25))
Or you can't get the configuration right,
I think we can specify this situation in the headpost.

RR xwcwt

My idea is to set the port 25 as the prefer and keep 587 is better.

Quote:Port: 25 (587 if it can''t work)

(05-23-2019 06:07 PM)wsk Wrote:  

(05-23-2019 03:40 PM)xwcwt Wrote:  

(05-23-2019 03:01 PM)wsk Wrote:  In the environment of CentOS 7:
SMTP:
Port: ((587 -> 25))
Or you can't get the configuration right,
I think we can specify this situation in the headpost.

RR xwcwt

My idea is to set the port 25 as the prefer and keep 587 is better.

Good to me. Should I modify as:

Quote:Port: 25 (587 if it can''t work)

(05-27-2019 10:45 AM)xwcwt Wrote:  

(05-23-2019 06:07 PM)wsk Wrote:  

(05-23-2019 03:40 PM)xwcwt Wrote:  

(05-23-2019 03:01 PM)wsk Wrote:  In the environment of CentOS 7:
SMTP:
Port: ((587 -> 25))
Or you can't get the configuration right,
I think we can specify this situation in the headpost.

RR xwcwt

My idea is to set the port 25 as the prefer and keep 587 is better.

Good to me. Should I modify as:

Quote:Port: 25 (587 if it can''t work)

You may say:

Port: 25 or 587 ans 25 is the prefer.

(08-26-2014 05:29 AM)DaY Wrote:  Thunderbird versions
We had a lot of problem configuring thunderbird on centos 8 to talk with our zimbra mail server. I tried to configure openssl config to use MinProtocol = TLSv1 and it works for 'openssl s_client' but does not work with thunrderbird. Finally, I downloaded thunderbird 68.10 from https://www.thunderbird.net/en-US/ and it appears to work well with our zimbra mail server.

(07-17-2020 12:26 PM)RongxuanMao Wrote:  

(08-26-2014 05:29 AM)DaY Wrote:  Thunderbird versions
We had a lot of problem configuring thunderbird on centos 8 to talk with our zimbra mail server. I tried to configure openssl config to use MinProtocol = TLSv1 and it works for 'openssl s_client' but does not work with thunrderbird. Finally, I downloaded thunderbird 68.10 from https://www.thunderbird.net/en-US/ and it appears to work well with our zimbra mail server.

Tried this way to fix Thunderbird successes, but it is hard to find configure file for openssl.
we can start from "/etc/ssl" to looking for it.
At the end I found "opensslcnf.config" with Dr.Gu's help:

Code:

[rongxuanmao@localhost back-ends]$ pwd
/etc/crypto-policies/back-ends
[rongxuanmao@localhost back-ends]$ ll opensslcnf.config
lrwxrwxrwx. 1 root root 49 Jul  9 12:33 opensslcnf.config -> /usr/share/crypto-policies/DEFAULT/opensslcnf.txt

I am not sure opensslcnf.config will always store here .
should we add this path to head-post.

RR lingu

(08-26-2014 05:29 AM)DaY Wrote:  web client address: http://mx.d-thinker.org:9980

mail client configuration:
pop server address: mx.d-thinker.org, port: 995, using SSL authentication
smtp server address: mx.d-thinker.org, port: 25 and 587, using TLS authentication
imap with SSL, port 993

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password

SMTP:
Server name: mx.d-thinker.org
Port: 25(prefer) or 587
Authentication method: Normal password
Security: STARTTLS

The maximum message size is 50MB.

Thunderbird versions
We had a lot of problem configuring thunderbird on centos 8 to talk with our zimbra mail server. I tried to configure openssl config to use MinProtocol = TLSv1 and it works for 'openssl s_client' but does not work with thunrderbird. Finally, I downloaded thunderbird 68.10 from https://www.thunderbird.net/en-US/ and it appears to work well with our zimbra mail server.

Example location of "opensslcnf.config" : "/etc/crypto-policies/back-ends/"
Note: different version of openssl may change the location of "opensslcnf.config".

(07-20-2020 07:27 PM)RongxuanMao Wrote:  

(08-26-2014 05:29 AM)DaY Wrote:  web client address: http://mx.d-thinker.org:9980

mail client configuration:
pop server address: mx.d-thinker.org, port: 995, using SSL authentication
smtp server address: mx.d-thinker.org, port: 25 and 587, using TLS authentication
imap with SSL, port 993

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password

SMTP:
Server name: mx.d-thinker.org
Port: 25(prefer) or 587
Authentication method: Normal password
Security: STARTTLS

The maximum message size is 50MB.

Thunderbird versions
We had a lot of problem configuring thunderbird on centos 8 to talk with our zimbra mail server. I tried to configure openssl config to use MinProtocol = TLSv1 and it works for 'openssl s_client' but does not work with thunrderbird. Finally, I downloaded thunderbird 68.10 from https://www.thunderbird.net/en-US/ and it appears to work well with our zimbra mail server.

Example location of "opensslcnf.config" : "/etc/crypto-policies/back-ends/"
Note: different version of openssl may change the location of "opensslcnf.config".

After test with zhihao, find out this way not work for thunderbird 78.0 or 68.9.
Trying to store thunderbird 68.10 to GCP
define gcp://world/software/thunderbird/pkg for store thunderbird packsges
sp: g1b

RR zhihao

(07-21-2020 11:29 AM)zhihao Wrote:  

(07-20-2020 07:27 PM)RongxuanMao Wrote:  After test with zhihao, find out this way not work for thunderbird 78.0 or 68.9.
Trying to store thunderbird 68.10 to GCP
define gcp://world/software/thunderbird/pkg for store thunderbird packsges
sp: g1b

RR zhihao

审核gcp路径的时候，可以不用加上服务器 sp: g1b 位置。 其他没有问题。

(07-21-2020 11:34 AM)RongxuanMao Wrote:  

(07-21-2020 11:29 AM)zhihao Wrote:  

(07-20-2020 07:27 PM)RongxuanMao Wrote:  After test with zhihao, find out this way not work for thunderbird 78.0 or 68.9.
Trying to store thunderbird 68.10 to GCP
define gcp://world/software/thunderbird/pkg for store thunderbird packsges
sp: g1b

RR zhihao

审核gcp路径的时候，可以不用加上服务器 sp: g1b 位置。 其他没有问题。

update head post

(07-22-2020 10:31 AM)zhihao Wrote:  I've found a thunderbird 68.10 windows version, I want to upload it to gcp://world/software/thunderbird/pkg/win64/
Is this a right path?

RR RongxuanMao

(08-26-2014 05:29 AM)DaY Wrote:  thunderbird's GCP is:
gcp://world/software/thunderbird/

(08-18-2021 05:46 PM)zhigang Wrote:  

(08-26-2014 05:29 AM)DaY Wrote:  thunderbird's GCP is:
gcp://world/software/thunderbird/

I don't know what "GCP" means , would you mind replying me some definition ?

(08-18-2021 05:57 PM)ChenZijian Wrote:  

(08-18-2021 05:46 PM)zhigang Wrote:  

(08-26-2014 05:29 AM)DaY Wrote:  thunderbird's GCP is:
gcp://world/software/thunderbird/

I don't know what "GCP" means , would you mind replying me some definition ?

The GCP info is in Information for new members E4, please also update this info to head post.

(07-10-2023 06:55 PM)lhc Wrote:  如果出现"thunderbird failed to find the settings for your email account"的问题

建议使用File/Offline/Work Offline

(08-26-2014 05:29 AM)DaY Wrote:  web client address: http://mx.d-thinker.org:9980

(09-19-2024 05:23 PM)Yijun Wrote:  

(08-26-2014 05:29 AM)DaY Wrote:  web client address: http://mx.d-thinker.org:9980

This Web client address cannot be accessed normally

(08-26-2014 05:29 AM)DaY Wrote:  web client address: http://mx.d-thinker.org:9980

mail client configuration:
pop server address: mx.d-thinker.org, port: 995, using SSL authentication
smtp server address: mx.d-thinker.org, port: 25 and 587, using TLS authentication
imap with SSL, port 993

Tested Thunderbird setting:
IMAP:
Server name: mx.d-thinker.org
Port: 993
Security: SSL/TLS
Authentication method: Normal password

SMTP:
Server name: mx.d-thinker.org
Port: 25(prefer) or 587
Authentication method: Normal password
Security: STARTTLS

The maximum message size is 50MB.

Thunderbird talk to our zimbra mail server need check TLS version. New version of thunderbird only access TLS version 3 and above, but our zimbra version is 1. We need to change Thunderbird config file to fix the problem:

Code:

setting -- search config editor -- set security.tls.version.min to 1

History:
Thunderbird versions
We had a lot of problem configuring thunderbird on centos 8 to talk with our zimbra mail server. I tried to configure openssl config to use MinProtocol = TLSv1 and it works for 'openssl s_client' but does not work with thunrderbird. Finally, I downloaded thunderbird 68.10 from gcp://world/software/thunderbird/ and it appears to work well with our zimbra mail server.

Example location of "opensslcnf.config" : "/etc/crypto-policies/back-ends/"
Note: different version of openssl may change the location of "opensslcnf.config".

thunderbird's GCP is:
gcp://world/software/thunderbird/

Here is the GCP info