onetel email blocked even though settings are correct

[picturevalve]

I have received the following email from talktalk :

"Hi,
We recently contacted you, asking you to update the settings on the app or software you use to access your TalkTalk email service. Our records show that you are still accessing your email using unencrypted email settings, because of this, from 22nd February you will no longer be able to receive or send emails via this email app or software. "

I had previously received a similar email in September last year and had adjusted my settings for Thunderbird and mailwasher. Asd I heard nothing further I assumed it was ok - until Tuesday when I received the warning email above. I have double checked the settings and all seems ok.

What is going on?

[Ady-TalkTalk]

Hi picturevalve, thanks for lettings us know.

Ady

[picturevalve]

Yes thanks Ady,

Mailis working for both T-bird and mailwasher. Mailwasher is 6.5.4 Pro with the ssl workaround mentioned in another thread. First mail check it says "cannot load ssl library", then trying again mailwasher works o/k.

[Ady-TalkTalk]

You should find that mail is working normally now. 

Ady

[picturevalve]

Hi Ady,

Is it ok to use t-bird yet?

Thanks.

[Ady-TalkTalk]

There's a delay in getting these restored at the moment. I've sent a chaser to get this speeded up. 

Ady

[picturevalve]

That's great, thanks. I've disabled both T-bird and mailwasher for the moment. I'll not use T-bird for 48+ hours and mailwasher not at all until I hear back from firetrust.

[Ady-TalkTalk]

Hi picturevalve, I've added your mailbox to those to be restored to normal function. Please allow 48 hours for the change to complete.

Ady

[Gondola]

OK, good. If you have the POP3 settings ready in Thunderbird and you don't use any other method to access your mailbox other than webmail and mailwasher then it must be mailwasher that's connecting insecurely to the mailbox. There's the culprit that has caused your device access to be removed.

NB Mailwasher must be at least Version 7 to support TLS1.2 secure encryption.

You use POP3 so I'll give the settings for a POP3 secure email setup with Mailwasher.

Mailwasher

Go to Settings > Accounts > Incoming

• Server Type: (Select dropdown) - POP3
• Server Address: mail.talktalk.net
• Server Port: 995
• Tick - This server requires a secure connection (SSL)
• Username: Your TalkTalk email address
• Password: Your TalkTalk email password

Select the Outgoing tab

• SMTP server Address: smtp.talktalk.net
• Server Port Number: 587
• Tick - SMTP Server Requires Authentication?
• Tick - Use the following login:
  Username: Your TalkTalk email address
  Password: Your TalkTalk email password
• Secure Connection? (Select dropdown) - STARTTLS or if not available then TLS

[picturevalve]

I already have those settings for Thunderbird with 995 for pop3.

That is my problem.

The settings for Mailwasher - I have entered a support request with firetrust.

[Gondola]

If you don't know how to use mailwasher with plain password authentication then cease using mailwasher.

In order to help you use the right settings I need to have details of the devices you currently use email software on. You need to update the settings and then wait for TalkTalk to restore access to your mailbox because that access has been removed because you've been using insecure server settings as the email notification from TalkTalk explained.

In the meantime you have access via webmail and an up to date Internet browser.

Select here:  Sign in to TalkTalk Mail

Enter your full TalkTalk Mail email address and password, select Sign in.

On updating the Thunderbird email software Server Settings (incoming mail) and outgoing SMTP server settings, for any active mailbox that does have IMAP / POP3 access, you'll possibly be asked to accept a new certificate (yes, accept) and to enter the email password when using Thunderbird to read or write emails so have the current password ready (when you've set a new password). Tick to remember or save the password before entering it. Each email address needs to have it's own settings and its own outgoing SMTP server because outgoing authentication requires the email account User Name and Password.

User Name is the full email address and Password is the email password.

• Start Thunderbird
• Select the Thunderbird triple line menu top right
• Select Account Settings from the menu
• Select Server Settings under the email account name in the left side panel
• Use the entries as shown in the table
• Look down the left side panel to Outgoing Server SMTP
• Select Edit to update the Outgoing server settings as per the lower entries in the table below - remember to select the correct Outgoing Server for the correct email account.

Thunderbird email client settings for all TalkTalk Mail domains including talktalk, tiscali and their sister email addresses are:

Account Type	IMAP secure Email Account
User Name	Full email address
Password	Email password
Incoming mail server (IMAP)	mail.talktalk.net
Incoming Port	993 (see note below)
Incoming Connection Security	SSL/TLS
Authentication Method	Normal Password
Outgoing server (SMTP)	smtp.talktalk.net
Outgoing Port	587
Outgoing Connection Security	STARTTLS
Authentication Method	Normal Password

Note: If you use POP3 then the only difference is in the incoming mail server port that is 995 for POP3 secure.

The TalkTalk Mail Support Hub is your go to resource for information, guides and Community support for TalkTalk Consumer home broadband and MailPlus subscribers.

Select here:
 TalkTalk Mail Support

TalkTalk Mail help

 Email settings and device setup guides for TalkTalk Mail

[picturevalve]

With mailwasher I also get "The mail server does not support APOP authentication".

[picturevalve]

After changing a few things I now get this message:

" Sending of username did not succeed. Mail server mail.talktalk.net responded: [AUTH] Unsupported authentication mechanism."

Screenshot is not possible as I do not have image edit capabilities, or I do not know how.

[Gondola]

The logs would be from about two weeks ago. So something connecting to your mailbox recently would have been logged as having insecure settings.

You may need to look more closely at the mail collection service(s) or devices or think about mail software on a device that you may not normally use but which would have been connecting to sync to the mailbox. 

If you definitely cannot find what's made the insecure connection then change the mailbox password. Then only update it in the devices you trust.

[picturevalve]

Does this mean that if I had an old laptop that I used to use for email and haven't used for ages that it would be on the logs as being insecure?

[picturevalve]

That's how it was set before it failed.

[Gondola]

All you need is authentication by plain / normal password alongside the TLS 1.2 encryption.

[picturevalve]

It seems APOP secure authentication is not supported in pop3 for this account, neither  is MSN secure password authentication.

Now for T-bird.

[Gondola]

Either one or more settings used by mailwasher to connect to your mailbox or one or more settings used by Thunderbird are still insecure or there are additional mail collection service(s) or devices not yet identified and updated. What's certain is that the TalkTalk logs have detected an insecure connection.

So, first thing is to identify all email software including multiple email clients on one device and all devices that could be connecting to your mailbox. Other mail collection service like Gmail, desktop, laptop, notebook, tablet, phone etc

Then check the incoming and outgoing server settings for all.

I offer to check those settings for you. Just take screenshots of the server settings, image edit to obscure the first part of your email address and upload here using the camera icon (desktop browser) above this Reply area.