Thunderbird Version 78.10 breaks work around for outdated security protocols
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
People
(Reporter: tweed.lorne, Unassigned)
Details
(Whiteboard: [support])
Attachments
(1 file)
|
4.33 KB,
text/plain
|
Details |
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36
Steps to reproduce:
When version 78 was released, one of my email servers was unable to send mail. After reading your documentation, I found that the problem was probably an out of date security protocol. I was able to fix it for a while, but with the 78.10.1 update, the problem has returned and the recommended changes to my configuration do not correct the issue.
Actual results:
With the first few versions of 78, I originally got a message that said: "Sending of the message failed. Peer using unsupported version of security protocol." Then I changed security.tls.version.min to 1, the error message went away and my e-mail appeared to be sent but never arrived at the destination account. Then, I changed security.tls.version.enable-deprecated = true and I was able to send e-mails. With the version 78.10 update, I am unable to send e-mails.
Expected results:
A test e-mail appears to be sent but never arrives at the destination account.
|
Reporter | |
Comment 1•5 years ago
|
||
Just checked my version history. It worked with version 78.7.1, and is not working with 78.10.1 I was away from home for a while so there is a gap.
|
||
Updated•5 years ago
|
Suggestion:
exit Thunderbird and all other programs
Start computer in 'Safe Mode with networking' mode
Use Telnet to see if you can get a connection
Type: telnet yourdomain port number eg: telnet mail.btinternet.com 465
also test for port 587
If you get connection 220 response, problem could be with the Anti-Virus Firewall.
What AV are you using?
|
|
Reporter | |
Comment 3•5 years ago
|
||
Log file when the problem was occuring. Attempted to send an e-mail using "Vesta" {the problem isp}
|
|
Reporter | |
Comment 4•5 years ago
|
||
Not in safe mode,
telnet port 465 result: command window goes blank for a period and then comes back
telnet port 587 result: error
I'm unable to easily run safe mode as I've connected my monitor using HMDI cable & it shows nothing in safe mode. I'd have to buy a different cable.
I've attached a log file showing an attempt to send an e-mail that just disappeared.
Note: I have one account that has to use the outdated protocols, so I have security.tls.version.min to 1
Testing protocol minimum still working.
All was working ok using 78.10.0 and emails received/sent ok.
Updated now and sent email to that account to check download immediately, seconds after update.
Thought there was an issue at first as it looked like it got stuck on sending login, then all seemed to kick in and started checking and receiving ok.
It seems the first email I sent went on a mystery tour and arrived after the second one I sent.
Confirm all still working.
What Anti-Virus / Firewall are you using ?
I have already come across someone using Norton 360 which allowed outgoing but not incoming.
Exit Thunderbird, Access Firewall, Thunderbird should be allowed, but block it, ok it and exit Firewall.
then acces Firewall again, set Thunderbird as allowed and ok it.
then start Thunderbird and check receiving and sending.
|
|
Reporter | |
Comment 7•5 years ago
|
||
I am using Windows Defender. Thunderbird was NOT on the allowed list. I added it, there was no change to the behaviour.
I can send a message using Thunderbird and my gmail account, no problems.
My problem is only with the account on vesta.irm.org
When I send an email, I get a message that vesta is connected, then that the mail is sent, and then, it is copied to my "sent mail folder" which is on my Gmail account.
Everything looks good but the email doesn't ever appear on the account I'm sending it to.
|
||
Comment 8•5 years ago
|
||
Based on the log from comment 25, there's no problem with the connection. If there were a problem with the ssl and such, you'd not get ANY response from the server. And actually the log seems to say the message WAS sent "SMTP Response: 250 ok 1620484127 qp 18235".
I don't think Thunderbird does anything wrong here. Maybe a server bug if the sending doesn't really work even if it said it did.
Description
•