System specs:
HP-UX 11.11
Stunnel 4.15
OpenSSL 0.8.7i
Config File:
; Certificate/key is needed in server mode and optional in client mode
;cert = /opt/iexpress/stunnel/etc/stunnel/mail.pem
;key = /opt/iexpress/stunnel/etc/stunnel/mail.pem
; Some security enhancements for UNIX systems - comment them out on Win32
;chroot = /opt/iexpress/stunnel/var/lib/stunnel/
;setuid = nobody
;setgid = nogroup
; PID is created inside chroot jail
pid = /tmp/stunnel.pid
; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
;compression = rle
; Workaround for Eudora bug
;options = DONT_INSERT_EMPTY_FRAGMENTS
; Authentication stuff
;verify = 2
; Don't forget to c_rehash CApath
; CApath is located inside chroot jail
;CApath = /certs
; It's often easier to use CAfile
;CAfile = /opt/iexpress/stunnel/etc/stunnel/certs.pem
; Don't forget to c_rehash CRLpath
; CRLpath is located inside chroot jail
;CRLpath = /crls
; Alternatively you can use CRLfile
;CRLfile = /opt/iexpress/stunnel/etc/stunnel/crls.pem
; Some debugging stuff useful for troubleshooting
debug = 7
;foreground = yes
output = stunnel.log
; Service-level configuration
[pop3s]
; Use it for client mode
client = yes
;accept = 995
;connect = 110
accept = localhost:110
connect = POP3S.MAILSERVER:995
;[imaps]
;accept = 993
;connect = 143
;[ssmtp]
;accept = 465
;connect = 25
;[https]
;accept = 443
;connect = 80
;TIMEOUTclose = 0
; vim:ft=dosini
Problem:
When I try to execute the following command "telnet localhost 110" I get an entry in the stunnel log file and I am unable to connect to the secure pop3 server. I know that this is not a firewall issue because I can telnet directly to the POP3S.MAILSERVER on port 995 and establish a connection, I also know that the server works fine because I set up stunnel on my windows xp machine and that did not have a problem establishing a connection. Any help on this issue would be great.
Here is the log I am getting
2006.08.10 18:23:03 LOG5[16138:1]: stunnel 4.15 on hppa2.0w-hp-hpux11.11 with Op
2006.08.10 09:43:55 LOG5[7158:1]: 2000 clients allowed
2006.08.10 09:43:55 LOG7[7158:1]: FD 4 in non-blocking mode
2006.08.10 09:43:55 LOG7[7158:1]: FD 5 in non-blocking mode
2006.08.10 09:43:55 LOG7[7158:1]: FD 6 in non-blocking mode
2006.08.10 09:43:55 LOG7[7158:1]: SO_REUSEADDR option set on accept socket
2006.08.10 09:43:55 LOG7[7158:1]: pop3s bound to 127.0.0.1:110
2006.08.10 09:43:55 LOG7[7263:1]: Created pid file /tmp/stunnel.pid
2006.08.10 16:15:45 LOG7[7263:1]: pop3s accepted FD=0 from 127.0.0.1:57040
2006.08.10 16:15:45 LOG3[7263:1]: Connection rejected: create_client failed
2006.08.10 16:30:34 LOG7[7263:1]: pop3s accepted FD=0 from 127.0.0.1:57156
2006.08.10 16:30:34 LOG3[7263:1]: Connection rejected: create_client failed
2006.08.10 16:45:34 LOG7[7263:1]: pop3s accepted FD=0 from 127.0.0.1:57275
2006.08.10 16:45:34 LOG3[7263:1]: Connection rejected: create_client failed
2006.08.10 17:00:36 LOG7[7263:1]: pop3s accepted FD=0 from 127.0.0.1:57401
2006.08.10 17:00:36 LOG3[7263:1]: Connection rejected: create_client failed
2006.08.10 17:15:36 LOG7[7263:1]: pop3s accepted FD=0 from 127.0.0.1:57506
2006.08.10 17:15:36 LOG3[7263:1]: Connection rejected: create_client failed
2006.08.10 17:30:35 LOG7[7263:1]: pop3s accepted FD=0 from 127.0.0.1:57614
2006.08.10 17:30:35 LOG3[7263:1]: Connection rejected: create_client failed
Matt T. Miller
Accenture
Minneapolis, MN USA
612-277-1826
aim: mttmiller8
email: matt.miller@accenture.com
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.