vulnerabilities, with or without devtoolset, *THIS* is very, very bad
news.
Just saying.
--
Adi Pircalabu
op=%t/%p, retr=%r/%b, del=%d/%m,
size=%s
egrep 'dovecot: service=imap, user=u...@domain.com.au.*Logged out'
/var/log/maillog | tail -n 1
Jul 20 15:59:38 server dovecot: service=imap, user=u...@domain.com.au,
ip=[127.0.0.1]. Logged out rcvd=38, sent=593
YMMV
--
Adi Pircalabu
. If things can go
pear-shaped they will :)
Cheers,
--
Adi Pircalabu
monopolies and it's only gonna get worse.
--
Adi Pircalabu
On 08-12-2020 13:18, John Fawcett wrote:
On 08/12/2020 01:01, Adi Pircalabu wrote:
On 08-12-2020 10:33, Adi Pircalabu wrote:
On 08-12-2020 9:41, John Fawcett wrote:
On 07/12/2020 23:22, John Fawcett wrote:
On 07/12/2020 23:09, Adi Pircalabu wrote:
On 08-12-2020 3:13, John Fawcett wrote
On 08-12-2020 10:33, Adi Pircalabu wrote:
On 08-12-2020 9:41, John Fawcett wrote:
On 07/12/2020 23:22, John Fawcett wrote:
On 07/12/2020 23:09, Adi Pircalabu wrote:
On 08-12-2020 3:13, John Fawcett wrote:
On 07/12/2020 06:02, Adi Pircalabu wrote:
Hi,
I have a Dovecot proxy setup
On 08-12-2020 9:41, John Fawcett wrote:
On 07/12/2020 23:22, John Fawcett wrote:
On 07/12/2020 23:09, Adi Pircalabu wrote:
On 08-12-2020 3:13, John Fawcett wrote:
On 07/12/2020 06:02, Adi Pircalabu wrote:
Hi,
I have a Dovecot proxy setup with several proxy machines (currently
running
On 08-12-2020 3:13, John Fawcett wrote:
On 07/12/2020 06:02, Adi Pircalabu wrote:
Hi,
I have a Dovecot proxy setup with several proxy machines (currently
running 2.3.11.3) in front of the real Dovecot servers (2.3.10.1)
storing the mailboxes. "doveconf -a | egrep lip&quo
ssion=<%{session}>
In the real server maillog I'm expecting to have "lip" replaced with the
IP address of the proxy. It works as expected for imap-login processes,
however for pop3-login processes I still see the real server IP instead
of the proxy IP. Ideas?
Regards,
--
Adi Pircalabu
-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
---CUT HERE---
dig exalt.com.au txt +short
"v=spf1 ip4:103.27.34.46 +a +mx +ip4:43.241.54.89 ~all"
"MS=ms59508959"
Cheers,
--
Adi Pircalabu
that header.
--
Adi Pircalabu
eferring after DATA is perfectly fine these days. If the
sending MTA, acting as a client in the SMTP conversation, doesn't behave
properly to 5xx after DATA, it's not the recipient's MTA problem, the
sender is broken and there's nothing the receiving MTA can do about it.
Make it their problem, not yours.
--
Adi Pircalabu
On 22-05-2020 15:45, Voytek Eymont wrote:
On Fri, May 22, 2020 2:05 pm, Adi Pircalabu wrote:
On 22-05-2020 10:38, Voytek Eymont wrote:
Hardly a Dovecot issue. Can you please post the output of this
command?
/usr/bin/fail2ban-regex /var/log/dovecot.log
/etc/fail2ban/filter.d/dovecot.conf
nothing
not sure where/how to look
is there a standard/approved doveot filter..?
Hardly a Dovecot issue. Can you please post the output of this command?
/usr/bin/fail2ban-regex /var/log/dovecot.log
/etc/fail2ban/filter.d/dovecot.conf
--
Adi Pircalabu
configuration to specify the dovecot host *and* enable tls. See
https://github.com/roundcube/roundcubemail/blob/master/plugins/managesieve/config.inc.php.dist
Cheers,
--
Adi Pircalabu
end of thread ladies and gentlemen. There's no
such thing as a free lunch, people still need to pay their bills at the
end of the day and, every so often, some *really* great software such as
Dovecot / Sieve blossoms out as a result of that :)
--
Adi Pircalabu
node, active-passive cluster.
--
Adi Pircalabu
ks
available
How is your NFS export mounted on the client? Can you post the output of
"egrep nfs /proc/mounts"?
--
Adi Pircalabu
how your deployment
looks like, nor the scale, but I'm just chipping in. Tuning various
Dovecot may be just kicking the can down the road, looking into
alternate storage backends could be an option you should perhaps
consider.
Cheers,
--
Adi Pircalabu
practical.
--
Adi Pircalabu
login script, see:
https://wiki.dovecot.org/PostLoginScripting
Can also hook a password expiry check in dovecot-lda to send periodic
reminders, although that's a bit unorthodox.
--
Adi Pircalabu
rg/html/rfc1830
--
Adi Pircalabu
Op di 18 dec. 2018 om 17:01 schreef Ruud Voorjans
doveconf -n output:
# 2.3.2.1 (0719df592): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.2 ()
# OS: Linux 4.18.0-12-generic x86_64 Ubuntu 18.10
# Hostname: mail.example.org [1]
auth_debug = yes
auth_debug_
debugging in Postfix:
postconf -e "debug_peer_level = 20"
postconf -e "debug_peer_list = xx.xx.xx.xx"
postfix reload
where xx.xx.xx.xx is the unlucky client IP address.
Possibly some crappy SMTP PIPELINING implementation at the Apple end,
who knows.
--
Adi Pircalabu
IMAP servers using the same shared NFS
storage, however my question was: are the *individual mailboxes* on that
share accessed *at the same time* from more than one IMAP server?
--
Adi Pircalabu
On 11/15/18 6:23 AM, Adi Pircalabu wrote:
Are you connecting to the same mailbox over NFS from
for me(c), may not work
for everyone" applies.
--
Adi Pircalabu
On 2018-11-14 21:47, Adrian M wrote:
Thanks, they are as in example, except for "mailbox_list_index = yes"
witch is from https://wiki.dovecot.org/PerformanceTuning
On Wed, Nov 14, 2018 at 12:18 PM Aki Tuomi
wrote:
Y
Forgot to add "doveconf -n" for the proxy server:
# 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.24 (124e06aa)
# OS: Linux 4.14.81-6.el7xen.x86_64 x86_64 CentOS Linux release 7.5.1804
(Core)
# Hostname: proxy1.0aditest.local
auth_cache_negative_ttl = 5 mins
quot;." INBOX.Spam
* LSUB () "." INBOX.Templates
* LSUB (\Trash) "." INBOX.Trash
. OK Lsub completed (0.000 + 0.000 secs).
. LOGOUT
* BYE Logging out
. OK Logout completed (0.000 + 0.000 secs).
Connection closed by foreign host.
How do I overwrite 'namespace/inbox/prefix' for an user on the Dovecot
proxy? Is user_query working in this context?
--
Adi Pircalabu
port-ham.sieve
sieve_pipe_bin_dir = /usr/lib64/dovecot/sieve
sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment
}
Perhaps worth adding a note to
https://wiki.dovecot.org/HowTo/AntispamWithSieve for this case?
--
Adi Pircalabu
On 2018-11-14 15:08, Adi Pircalabu wrote:
On 2018-1
On 2018-11-14 14:25, Adi Pircalabu wrote:
On 2018-11-14 13:51, Adi Pircalabu wrote:
On 2018-11-14 13:11, Adi Pircalabu wrote:
Hi,
Using https://wiki.dovecot.org/HowTo/AntispamWithSieve I'm trying to
execute scripts when moving to/from Spam folder, however nothing's
happening. The actions
On 2018-11-14 13:51, Adi Pircalabu wrote:
On 2018-11-14 13:11, Adi Pircalabu wrote:
Hi,
Using https://wiki.dovecot.org/HowTo/AntispamWithSieve I'm trying to
execute scripts when moving to/from Spam folder, however nothing's
happening. The actions are:
1. Move to Spam: redirect :copy
On 2018-11-14 13:11, Adi Pircalabu wrote:
Hi,
Using https://wiki.dovecot.org/HowTo/AntispamWithSieve I'm trying to
execute scripts when moving to/from Spam folder, however nothing's
happening. The actions are:
1. Move to Spam: redirect :copy "spamcop_spam@domain.local";
2. Move
ecot.pipe", "copy", "imapsieve", "environment",
"variables"];
redirect :copy "spamcop_ham@domain.local";
I must be missing something obvious. Thanks,
--
Adi Pircalabu
o me..)
Thanks.
See postfix always_bcc[1] parameter, as well as sender_bcc_maps and
recipient_bcc_maps for fine grained adjustments.
[1] http://www.postfix.org/postconf.5.html
--
Adi Pircalabu
On 09-08-2018 10:05, Kenneth Porter wrote:
On 8/7/2018 5:08 PM, Adi Pircalabu wrote:
- Since you're on dynamic IP at home, set up a VPN tunnel using the
mailserver as server and HTPC as client. OpenVPN is ubiquitous and
widely supported.
- rsync your mailboxes using the tunnel connection
.
This way you can back up your entire server, not only the mailboxes.
You can add doveadm in the mix if you want, or use imapsync and so on
and so forth.
YMMV
--
Adi Pircalabu
he space should only be added at the end,
*not* at the beginning! In the Received header the first character isn't
[[:blank:]], but "f", so I've been chasing the wild goose all this time
because I started with the wrong assumption :)
Sorry for the noise, all good now.
Cheers,
---
Adi Pircalabu
On 07-05-2018 12:13, Adi Pircalabu wrote:
I'm trying to use this expression in Sieve, but for some reason the
filter doesn't work:
require ["fileinto","regex"];
# rule:[gmail-outlook-yahoo-aol-friends]
if header :regex "received"
".from.*(outbound.protection
Or do I have to split it in an array as per
https://wiki2.dovecot.org/Pigeonhole/Sieve/Examples#Flagging_or_Highlighting_your_mail
example?
Thanks,
--
Adi Pircalabu
prevent any mailbox changes and run the last incremental, sanity checks,
IP reconfiguration if Dovecot is the drop-in replacement, start Dovecot,
another round of sanity checks, check the logs and so on. Here you're
already at the point of no return :)
---
Adi Pircalabu
don't want give each owner administrative
access.
There are options when running certbot as non-privileged user, such as
sudo, inotifywait -s -e modify /path/to/bundle.pem && doveadm reload and
so on.
--
Adi Pircalabu
users who are using weak passwords and have forgotten / mistyped
them by accident. Seen this enough times and the amount of support
required to make a sloppy & lazy customer happy again isn't always
trivial. If they're few and far apart you can live with it, otherwise
you'll have to reevalua
imit on the proxy can be a
significant improvement to the current situation when the Courier-IMAP
servers are open to IMAP abuse because they always see the proxy IP for
the incoming connection.
Just my .02AUD
--
Adi Pircalabu
with many
folders.
Thanks,
Adi Pircalabu, System Administrator
ble option available on
both backends and the proxies.
---
Adi Pircalabu
On 14-03-2017 20:17, Sami Ketola wrote:
Hi,
mail_max_userip_connections is only enforced at the backend level. The
setting has no effect on proxy. If you want to force the limit then
you can only do it in the backend.
Sami
On
-cert' as 'starttls', 'Y' AS proxy FROM mailbox WHERE
email = '%u' AND disabled_smtpauth=0
At the moment the only way I can limit the number of established
connections per source IP address on the Dovecot proxies is using
iptables, which isn't what I want.
Where else can I look?
Adi Pircalabu,
ce_count = 0
vsz_limit = 128 M
}
service managesieve {
process_limit = 1024
}
service pop3 {
process_limit = 1024
}
[...]
protocol imap {
imap_capability = IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
mail_max_userip_connections = 50
}
--
Adi Pircalabu
Reading the summary below I can't see any remote mention of a possible
fix for the crashes from:
http://dovecot.org/pipermail/dovecot/2016-October/105567.html
Just confirming this the case.
Adi Pircalabu
On 20/10/16 08:01, Timo Sirainen wrote:
http://dovecot.org/releases/2.2/rc/dovecot-2.2.26
doveconf -n and logs?
doveconf -a is usually not wanted.
Aki
On October 6, 2016 at 7:27 AM Adi Pircalabu <a...@ddns.com.au> wrote:
I'm running Dovecot as proxy in front of some IMAP/POP3 Dovecot &
Courier-IMAP servers and in the last couple of days I've been seeing a
lot of imap-log
locals.
#11 0x7f029b15f058 in io_loop_run (ioloop=0x18207b0) at ioloop.c:588
__FUNCTION__ = "io_loop_run"
#12 0x7f029b0f1b23 in master_service_run (service=0x1820650,
callback=) at master-service.c:640
No locals.
#13 0x7f029b3de593 in login_binary_run (binary=out>
it's very unlikely to
replace it with something else.
--
Adi Pircalabu, System Administrator
Discount Domain Name Services Pty Ltd, a Total Internet Company
PO Box 887, Hawthorn Vic 3122, Australia, T +61 3 9815 6868
Ask me about cloud hosting services
sasl
with sql/ldap/whatever one needs
Yep, saslauthd with rimap appears to be exactly what I need.
just in case one more ask why i did not use dovecot :)
The password forwarding feature is one of the reasons I started looking
into Dovecot.
Thanks to you both for your help.
--
Adi Pircalabu
51 matches
Mail list logo
