Menu
Reply
Highlighted
  • 14.33K
  • 594
  • 1.38K
Alessandro Volta
509 Views
Message 1 of 12
Flag for a moderator

Not getting my Emails by POP

Using Mozilla Thunderbird I'm no longer able to pull Emails by POP 

---------------------------------------------------------------
0 Kudos
Reply
Highlighted
  • 4.88K
  • 536
  • 1.76K
Very Insightful Person
Very Insightful Person
488 Views
Message 2 of 12
Flag for a moderator

Re: Not getting my Emails by POP

Not seeing similar issue with POP.  Are you able to provide more details or log of issue; make sure to redact or only post the VM error code?

FYI: change tbirdlog.bat line from set NSPR_LOG_MODULES=SMTP:5  to set NSPR_LOG_MODULES=POP3:5 are detailed here Outgoing Authentication Issues? - Check Email Logs

 

As a Very Insightful Person, I'm here to share my knowledge. I don't work for Virgin Media.

Click to learn more about VIP

Use Kudos to say thanks

Mark as Helpful Answer if I've helped

0 Kudos
Reply
Highlighted
  • 14.33K
  • 594
  • 1.38K
Alessandro Volta
481 Views
Message 3 of 12
Flag for a moderator

Re: Not getting my Emails by POP

I have @googlemail.com and @hotmail.co.uk Emails that work fine in Thunderbird 

Now getting for sending Email by @virginmedia.com or @blueyonder.co.uk

"Sending of message failed. The OCSP server experienced an internal error. The configuration related to smtp.virginmedia.com must be corrected"

Spoiler
[(null) 7724: Main Thread]: D/POP3 [this=04DA22E0] LoadUrl()
[(null) 7724: Main Thread]: D/POP3 [this=04DA22E0] Initialize()
[(null) 7724: Main Thread]: I/POP3 [this=04DA22E0] Connecting to server Pop3.blueyonder.co.uk:995
[(null) 7724: Main Thread]: D/POP3 [this=04DA22E0] Setting server busy in nsPop3Protocol::LoadUrl()
[(null) 7724: Main Thread]: I/POP3 [this=04DA22E0] Entering NET_ProcessPop3 0
[(null) 7724: Main Thread]: I/POP3 [this=04DA22E0] Entering state: 24
[(null) 7724: Main Thread]: I/POP3 [this=04DA22E0] Entering state: 25
[(null) 7724: Main Thread]: D/POP3 [this=04DA22E0] Clearing server busy in POP3_FREE
[(null) 7724: Main Thread]: D/POP3 [this=04DA22E0] Clearing running protocol in POP3_FREE
[(null) 7724: Main Thread]: D/POP3 [this=04DA22E0] ~nsPop3Protocol()
[(null) 7724: Main Thread]: D/POP3 sink: [this=18FCB940] Calling ReleaseFolderLock from ~nsPop3Sink
[(null) 7724: Main Thread]: D/POP3 sink: [this=18FCB940] ReleaseFolderLock haveSemaphore = FALSE

pop3.blueyonder.co.uk 62.254.26.202

pop3.virginmedia.com 62.254.26.222

smtp.virginmedia.com 62.254.26.219

smtp.blueyonder.co.uk 62.254.26.220

---------------------------------------------------------------
0 Kudos
Reply
Highlighted
  • 18.42K
  • 1.07K
  • 7.92K
Very Insightful Person
Very Insightful Person
465 Views
Message 4 of 12
Flag for a moderator

Re: Not getting my Emails by POP

@legacy1 

I've just tried sending via smtp.virginmedia.com and the mail went through successfully.  I've also manually checked pop3.virginmedia.com with openssl and it appears to validate correctly as well.

What AV solution are you using?

Tim

I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more

Have I helped? Click Mark as Helpful Answer or use Kudos to say thanks

0 Kudos
Reply
Highlighted
  • 14.33K
  • 594
  • 1.38K
Alessandro Volta
462 Views
Message 5 of 12
Flag for a moderator

Re: Not getting my Emails by POP


@ravenstar68 wrote:

What AV solution are you using?


With the move to win 10 none 

 

---------------------------------------------------------------
0 Kudos
Reply
Highlighted
  • 14.33K
  • 594
  • 1.38K
Alessandro Volta
460 Views
Message 6 of 12
Flag for a moderator

Re: Not getting my Emails by POP

Ok this is odd looking at the sending problem saying OCSP I went in options > advanced > tab Certificates
and unchecked "Query OCSP responder server to confirm the current validity of certificates" and that worked! but should I need this on?

on start up Thunderbird send out to 104.25.175.13:443 but I never get a ack

---------------------------------------------------------------
0 Kudos
Reply
Highlighted
  • 18.42K
  • 1.07K
  • 7.92K
Very Insightful Person
Very Insightful Person
422 Views
Message 7 of 12
Flag for a moderator

Re: Not getting my Emails by POP

I've done a little digging into this.  It looks like it's down to a problem at GlobalSign's end.

GlobalSign issue the certificates for Virgin Media's SSL connections.  Something's happened at one of their data centres that is affecting OCSP validation.

https://twitter.com/GSSystemAlerts/status/1238523405089079297

Tim

I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more

Have I helped? Click Mark as Helpful Answer or use Kudos to say thanks

0 Kudos
Reply
Highlighted
  • 18.42K
  • 1.07K
  • 7.92K
Very Insightful Person
Very Insightful Person
374 Views
Message 8 of 12
Flag for a moderator

Re: Not getting my Emails by POP

I've had a play with extracting certificates and checking OCSP status responses manually as Thunderbird is still happily working for me.

Here's a working cert (one of mine)

$ openssl ocsp -issuer le.pem -cert box.pem -url http://ocsp.int-x3.letsencrypt.org
WARNING: no nonce in response
Response verify OK
box.pem: good
	This Update: Mar 14 04:00:00 2020 GMT
	Next Update: Mar 21 04:00:00 2020 GMT

and here's an attempt to validate pop3.virginmedia.com's certificate

$ openssl ocsp -issuer issuer.pem -cert pop3virgin.pem -url http://ocsp2.globalsign.com/gsalphasha2g2
Error querying OCSP responder
140642996412864:error:27076072:OCSP routines:parse_http_line1:server response error:../crypto/ocsp/ocsp_ht.c:260:Code=530

I noticed that they are using a CDN and I put the offending url in a browser

Screenshot from 2020-03-14 08-21-12.png

So I think the @ModTeam do need to possibly get the email team to ask Globalsign to look again.

Tim

I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more

Have I helped? Click Mark as Helpful Answer or use Kudos to say thanks

Highlighted
  • 14.33K
  • 594
  • 1.38K
Alessandro Volta
347 Views
Message 9 of 12
Flag for a moderator

Re: Not getting my Emails by POP

Ok thanks for taking a look

---------------------------------------------------------------
0 Kudos
Reply
Highlighted
  • 4.88K
  • 536
  • 1.76K
Very Insightful Person
Very Insightful Person
336 Views
Message 10 of 12
Flag for a moderator

Re: Not getting my Emails by POP


@legacy1 wrote:

Ok this is odd looking at the sending problem saying OCSP I went in options > advanced > tab Certificates
and unchecked "Query OCSP responder server to confirm the current validity of certificates" and that worked! but should I need this on?


Leave Query OCSP responder servers to confirm the current validity of the certificates option selected and instead try:

  • Advanced > General
  • select Config Editor…
  • if you accept the risk select I accept the risk!
  • search for security.ocsp.require and temporarily set it to (the default) false
0 Kudos
Reply