Contributor
•
81 Messages
SMTP server configuration for Apple mail (and related issue)
I use an Imac that was configured years ago to use Comcast for Apple mail. I have 3 Comcast email addresses using POP3 for incoming mail. 3 days ago suddenly (zero configuration changes, upgrades, etc.) my main email address started refusing to send mail. It does receive incoming mail. The other two email addresses are functioning properly.
When the problem email doesn't send a message I get an error that states: "I cannot send message using the server Comcast. The sender address XXXX@comcast.net was rejected by the server smtp.comcast.net. The server response was: Please ensure your mail address and authenticating user match when sending messages". A list of 4 Comcast servers is displayed (Comcast, comcast.net, comcast.net, comcast.net). The message ends up in the Outbox.
The email address works with no problem from webmail. The issue is only when I use Apple mail, which is is what I use all the time.
I'd appreciate some help to try to resolve this out-of-the-blue issue.
1. Does anyone know what could have caused this to happen and what's the meaning of : "Please ensure your mail address and authenticating user match when sending messages"? What should one do to accomplish this "match"?
2. How can one see and validate the SMTP server's password?
3. Do user names configured for incoming and outgoing servers have to be the same? They were not for years.... I attached a screen capture of what I see.
Thanks in advance.
haz10
Contributor
•
81 Messages
2 years ago
I posted this morning with NO personal info and it "disappeared".... Are all posts first "checked out"?
0
0
haz10
Contributor
•
81 Messages
2 years ago
I got a call from Comcast and was told that the engineering team concluded that there are zero problems on their end. They are not supporting 3rd party email clients and do not have resources for supporting interfaces. The advice is to use Comcast's webmail, reset the password and ask for help from Apple, as whatever problems have been reported have nothing to do with Comcast. Isn't this fantastic support and concern about customers?
Happy Holidays!
1
0
haz10
Contributor
•
81 Messages
2 years ago
@flatlander3, thanks for your suggestions and comments. I do not know what I will do next as email is the most important application for me. POP3 is important because I want to make sure that all my mail is under my control and not only with a provider. Also I really do not want synchronization of mail between devices, the way IMAP does it. I do not yet know if gmail or yahoo mail support POP3 and unfortunately I would still have to use Comcast as an internet provider. As what happened shows, Comcast just doesn't care about any 3rd party email clients or email in general, which they claim that is "free" and as a result they provide what they charge for.... I wish there was an email expert that I could pay, who could help me through this.
BTW, Comcast released a new version of their webmail, which created a huge mess in webmail. Now, for each email address that I have, there are 2 sent mail folders, two trash folders. Emails were "distributed" across folders I did not create. Two of my emails show folders for my other email addresses with random emails in them. Two of my 4 emails are not "linked" , meaning that in order to use these to email addresses I have to login into each of them. And they call this an "enhancement".
Happy Holidays and thanks to those of you who tried to help!
1
0
flatlander3
Problem Solver
•
1.5K Messages
2 years ago
@haz10 If the immediate problem is pop3 running on a Mac -- Thunderbird --> Add account. Choose Manual
https://www.thunderbird.net/en-US/
Your Full Name = the display name you want to use in your email
Email address = comcast email address (that's also your mailbox)
Password = your password
[Manual Configuration]
Protocol = pop3
Hostname = pop3.comcast.net
Port = 995
Connection Security = SSL/TLS
Authentication method = Normal Password
Username = (your mailbox again, likely your comcast email address)
Hit the re-test button on the bottom left. If it shows a green banner on top, hit done, then finish.
As a bonus, it works with gpg/pgp encryption for free unlike Mac mail.
What's the problem with the default Mac mail? I don't think Mac is fully supporting pop3, at least on orphaned Sahara. I don't know about others going forward after that.
Mac is closed source so you can't see it, although one problem I suspect it may be port it's trying to use for pop3. You could do a Pcap download with wireshark and find out. Changing the port on Mac to 993, doesn't work for imap, it's still using 143/defaulting to it which typically is an insecure port, but it is still able to use SSL/TLS on that port. 143 must still be enabled for imap on the server side for now. Generally in the rest of the world, we all disable ports we don't use on mail servers, so 110/143 are usually fire walled off and removed from config files but Xfinity hasn't yet. They are the old legacy unencrypted ports. You can port scan the mail server pop3.comcast.net and see that both port 110/143 remain open, but there may be no service provided on it now on port 110. That's done from the server side.
[Troubleshooting it]
I'm not getting the certificate at all on port 110. This is a failure, your client won't work (any mail client using tls/ssl on port 110 with Xfinity):
# openssl s_client --connect pop3.comcast.net:110 -tls1_2
SSL handshake has read 0 bytes and written 220 bytes
Verification: OK
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
[Troubleshooting port 995]
On port 995, I am, and it works:
# openssl s_client --connect pop3.comcast.net:995 -tls1_2
(cert stuff)
.......
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 1840 bytes and written 306 bytes
Verification error: unable to verify the first certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
......
You could request @XfinityCSAEmail change their mail server config, but I don't think you'll get far.
There are a lot of other email clients out there too that will run on a Mac, both paid and free. Try a few out.
(edited)
0
0
haz10
Contributor
•
81 Messages
2 years ago
@flatlander3 , thanks for taking this much time to try to help. I am not a technical person and at my age (76) this is above my head. I am trying to do my best in this world that is becoming more and more complex. I have not upgraded the OS on my Mac for a few years. Apple mail with their client worked without problems (POP3 included) since 2014, until about 6 weeks ago, when Comcast changed something. One can see the port number (with appropriate steps) in Mac mail and it is set to the one Comcast recommends.
I switched from Eudora (a fantastic mail client that was developed and then dropped by Qualcomm that I loved) to Apple mail in 2014 and that was not an easy job. Based on that experience, I am not taking switching lightly. The problem is not the mail client, the problem is Comcast. As the posts on this thread show, different 3rd party mail clients were impacted for some of their outgoing email addresses by something that Comcast changed but doesn't admit to, as they just do not want to deal with it. Some more technical users figured out how to fix the problem that was created by Comcast. I will try to deal with it one step at a time, very carefully, as I cannot afford to create more problems than what Comcast created for me. I am saving what you posted, in case I need this info later. Thanks again.
2
0
XfinityGabrielS
Official Employee
•
135 Messages
2 years ago
@haz10 - you have two issues going on
(edited)
1
0
haz10
Contributor
•
81 Messages
2 years ago
Thanks. I am away. I will read after I return.
0
0
haz10
Contributor
•
81 Messages
2 years ago
While I was away I got the following alert about about a post to this forum, but I cannot find the actual post. Regardless, it is the first time someone from Comcast acknowledged that some configuration rules were changed (as other reported, now each incoming server requires a dedicated outgoing server) and made some recommendations for changes.
I tried to follow the excellent steps that @FBPDX posted a while ago for creating a dedicated outgoing server for each incoming server, for one of my Comcast email addresses that I use less often. Unfortunately regardless how many times I went through the process to add a new outgoing server dedicated to this "account", the info I entered under Mail/preferences/Accounts/Server Settings (for the "account" in question)/Outgoing Mail Server/Edit SMTP Server List is NOT retained. There is NO Save option. When I want to back out, a Save button appears. Clicking on it, brings up "Verifying server settings", which then displays "Unable to verify account name or password". Now, under Server Settings/Outgoing Mail Server the Account shows "NONE" and this email address is no longer accessible... I repeated the process of trying to add a new dedicated outgoing server, but without any success.
I would appreciate any help. I do not know how to get back to XfinityGabrielS since his post doesn't appear on this thread and nobody at Direct Messaging was able to provide any help.
XfinityGabrielS posted a new reply on a post you are following:
@haz10 - you have two issues going on
0
0
haz10
Contributor
•
81 Messages
2 years ago
@flatlander3, thanks for all the time you spent with the problem that I and other 3rd party mail clients (Thunderbird, Forte Agent, Apple Mail) have been experiencing. I read a few times what you posted. While it makes sense, I would be afraid to execute, it is way too complicated for me. Deleting mail sounds very dangerous. With POP3, all my mail is on my computer; it is on Comcast servers only for a month. On my computer it is classified and moved in specific folders (something also not on Comcast). Losing it would be a major disaster for me. I am not computer literate and if anything goes wrong, I would not know what to do. I wish I would have your knowledge to help myself, but that's not the case.
What you described, might potentially explain what I have experienced when trying to add a new, dedicated outgoing server for one of the incoming server, outgoing server that is now shared. This approach seemed to have worked for everybody else who posted here and had the same problem. I cannot understand why it would not work for me, why is that I cannot add a new outgoing server. Now the mail account where I tried the approach is no longer accessible (or at least visible)...
I really do not know what to do and nobody at Comcast or Apple is available to help, they are just pointing fingers to each other. Email is the most important application and my past email is very important for me.
Thanks again and I hope that what you explained will help others to make sense of how these two vendors work (or rather not work) with each other.
0
0
haz10
Contributor
•
81 Messages
2 years ago
One of XfinityGabrielS' recommendations is to validate passwords. I could not figure out how to do that. I logged into the "master" Xfinity account. It does show 5 mail accounts for me. I am aware of 4 email addresses (one of them became not operational a long time ago and I could not figure out what to do about it, so I am ignoring it). When I look at the details for each, I see things that I do not understand under "sign-in and contact info":
- account #1 - email address #1; no option to change the password
- account #2 - email address #2 (the one that is not functional); no option to change the password
- account #3- no email address; change pw option
- account #4- nothing under "sign-in and contact info"
- account #5- email address #3; no option to change the password
Where does one change the password, if that's needed for each of these accounts?
How can one validate that password? XfinityGabrielS said "Check your passwords as I see many failed authentications when sending". How and where can one do that?
What's the meaning of what I see in Xfinity with these accounts where one of my active emails (email #4) is not listed, but there is an account (#4) with no sign-in info?
Can someone explain for everyone's benefit, maybe one of the Comcast staff? If there is some documentation explaining this (I could not find it), I'd appreciate it.
(edited)
0
LinLaug
New Poster
•
5 Messages
2 years ago
I suddenly stopped receiving emails on one of my accounts on my iPhone today. I didn’t make any changes, so what happened? After reading through this whole string, I find people with similar issues but none of the “solutions” seem to be helpful to me. I don’t have a laptop - only an iPad and iPhone. How can I get this resolved?
1
0
haz10
Contributor
•
81 Messages
2 years ago
@again, yes, he is the one who posted the helpful recommendations that do not show up in the Forum, but I got via an email alert. He is the first person who understands the issues and knows what's happening about email. Every time I mentioned his posting name, my post was marked private.
He is absolutely right, I authenticate as one user and send as another. That's because my main email address stopped sending outgoing mail and I have no choice. That's the problem I have that kicked of this thread. Also another email address I have stopped working. Maybe that's the one that causes authentication errors. I do not know how and where to check and change passwords for secondary email addresses. That's why I asked for help.
Is there any way to somehow get back to him and get the help I need to fix the problems that were created by the new Comcast email rules? Everybody is not a technical expert and that cannot be expected.
1
0
haz10
Contributor
•
81 Messages
2 years ago
@again, help would be much appreciated to try to fix the problems that I am encountering. I cannot believe that I have been trying to get help for almost 2 months by now every way I know about and I could not get any to-date, other than the message from XfinityGabrielS, which I do not know how to implement. The ticket that was opened traveled supposedly "up" to the engineers. I was told that they know nothing about any changes Comcast might have made and that they recommended to change the password....
The attempts to create a dedicated outgoing server left me with ONLY ONE functional outgoing email address out of the four that I have.
(edited)
1
0
haz10
Contributor
•
81 Messages
2 years ago
@again, thanks. I never used and I am not using Thunderbird. The Third Party Access is checked in webmail.
Apple mail works somewhat differently than Thunderbird. I am encountering multiple issues when trying to "correct" my configurations. I cannot just delete the email accounts that I have, as I would loose access to all my emails, now on my computer (I am using POP 3).
I tried to add a new outgoing server for one of the the emails that shares outgoing servers (to comply with Comcast's new requirement), but the Apple interface did not allow me to save them. In addition, my attempt created a new problem and now I cannot send email from an additional email address.
After 6 weeks of trying to get help from Comcast staff, I do not know what to do. At least there is formal acknowledgment that Comcast changed the configuration requirements and that's what's causing the problems I am experiencing. Apparently XfinityGabrielS is the only email expert; the only hope I have is that he can explain what I need to do to fix the problems that I am experiencing.
BTW, when you Reply, I am not notified. Only if you comment, do I get an email notification.
I appreciate you spending time trying to help me.
0
0
haz10
Contributor
•
81 Messages
2 years ago
I am afraid to say anything, but I decided to test again outgoing email from my different email addresses and IT WORKED, despite the fact that I was not able to follow what I was told that I have to do. I do not know what to believe.... I just hope that whatever works again will not go away again.
1