In-place upgrade 2.5.10 -> 3.08 (Debian)

2020-03-04 Thread Neil Price
I'm planning to upgrade Debian Stretch to Buster. Anyone done this on 
the same hardware? What cyrus related problems can I expect ?




Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: Cyrus imap and identity theft

2019-02-26 Thread Neil Price



On 22/02/2019 08:41 PM, Stéphane Branchoux wrote:


Each week , few users respond to phishing mails.
I use rules on firewalls, DNS filters, training program for users , 
anti spam products , anti virus ….


I am looking for a way or tools to reduce identity theft on my Cyrus 
imap server.
For example , scripts to geo localise ip requests , detect and reject 
bad connexions  ?
Is it possible to authorize few devices for a user and reject other 
devices  ?


Which tools do you use on your Cyrus imap servers to protect them ?




fail2ban and fail2ban-repeater 
https://stuffphilwrites.com/2013/03/permanently-ban-repeat-offenders-fail2ban/
ipset-blacklist https://github.com/trick77/ipset-blacklist (great for 
banning whole countries)

password policies

Plus the usual: SPF, clam, spamassassin, greylisting, etc
Spam check outgoing mail too.

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


What do these mean in cyrus.header?

2019-01-24 Thread Neil Price
/nonjunk $has_cal $Forwarded $MDNSent junk $label3 $label2 icc-forward 
$label1 $label4 $label5/

//

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

SOLVED: IDLE not working for one account only

2018-06-07 Thread Neil Price
cyrus.index needed to be updated to latest version. This affected 
accounts upgraded from 2.2.4


reconstruct -rf -V max user/badaccount

HIGHESTMODSEQ now looks more reasonable on telnet 143 login


On 05/06/2018 09:17, Neil Price wrote:

I'm using 2.5.10-3 (the one that comes with debian stretch)

I have one user that I cannot get IDLE to work for using either poll 
or idled.


Other accounts work normally. No errors in the log.

Have set him up with a number of email clients and they all do the 
same thing.


I can not see anything the account setup that can cause this, 
suggestions?



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: IDLE not working for one account only

2018-06-07 Thread Neil Price

What implications does HIGHESTMODSEQ have for idle?

I now have 2 accounts with borken idle and I notice they both return 
HIGHESTMODEQ 1 on select inbox but the good accounts return a much 
larger number.



On 05/06/2018 09:17, Neil Price wrote:

I'm using 2.5.10-3 (the one that comes with debian stretch)

I have one user that I cannot get IDLE to work for using either poll 
or idled.


Other accounts work normally. No errors in the log.

Have set him up with a number of email clients and they all do the 
same thing.


I can not see anything the account setup that can cause this, 
suggestions?



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: IDLE not working for one account only

2018-06-06 Thread Neil Price

I'm grateful for your help.

Attached is an imapd strace of the bad account going into idle, a 
message being sent to it, and it leaving idle again.



On 05/06/2018 17:11, Bron Gondwana wrote:

The timeouts are fine - that's just a select timeout so it can do cleanup.

recvfrom(14, "\2\0\0\0\0\0\0\0user.elangenhoven\0", 1032, 0, {sa_family=AF_UNIX, 
sun_path="/var/lib/cyrus/socket/idle.31167"}, [110->35]) = 26
sendto(14, "\2\0\0\0\0\0\0\0user.elangenhoven\0", 26, MSG_DONTWAIT, {sa_family=AF_UNIX, 
sun_path="/var/lib/cyrus/socket/idle.30947"}, 110) = 26
That's a push from the lmtpd (PID 31167) for delivery, followed by a push to 
the imapd (PID 30947) saying that the mailbox has been touched!
Sorry to be a pain, but can you do it again and get an strace of the imapd as 
well - the one which is in idle.
Thanks,
Bron.


On Wed, Jun 6, 2018, at 00:53, Neil Price wrote:


I've attached an strace of idled. It shows the bad user client 
(elangenhoven) going into idle and a message being sent to it.You can 
see the message being sent but there seems to be no reaction to it 
arriving.


There are a bunch of timeouts there?


On 05/06/2018 15:42, Bron Gondwana wrote:
Damn.  I guess I'm going to have to ask for an strace next!  Of the 
idled process probably.


Idle changed a bunch between 2.5 and 3.0, so I don't know how much 
I'll be able to help :(  Definitely an strace of the idled during 
both the start of the IDLE command and the delivery will help see 
what's happening.


Bron.





Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Email had 1 attachment:

 *
|strace.txt|
  12k (text/plain)



--
  Bron Gondwana, CEO, FastMail Pty Ltd
  br...@fastmailteam.com





Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


strace: Process 10379 attached
pselect6(1, [0], NULL, NULL, {tv_sec=1730, tv_nsec=561738279}, {[], 8}) = 1 (in 
[0], left {tv_sec=1723, tv_nsec=44475135})
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(1, [0], NULL, NULL, {tv_sec=1723, tv_nsec=0}, {[], 8}) = 1 (in [0], 
left {tv_sec=1722, tv_nsec=94923})
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
read(0, "a04 idle\r\n", 4096)   = 10
getpid()= 10379
open("/run/cyrus/proc/10379.new", O_RDWR|O_CREAT|O_TRUNC, 0666) = 19
fstat(19, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
write(19, "imap\tlocalhost [127.0.0.1]\telang"..., 63) = 63
close(19)   = 0
rename("/run/cyrus/proc/10379.new", "/run/cyrus/proc/10379") = 0
write(1, "+ idling\r\n", 10)= 10
open("/run/cyrus/lock/e/user/elangenhoven.lock", O_RDWR|O_CREAT|O_TRUNC, 0666) 
= 19
fcntl(19, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
fcntl(12, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
fstat(12, {st_mode=S_IFREG|0600, st_size=46688, ...}) = 0
stat("/var/lib/cyrus/mailboxes.db", {st_mode=S_IFREG|0600, st_size=46688, ...}) 
= 0
fcntl(12, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
open("/var/spool/cyrus/mail/e/user/elangenhoven/cyrus.index", O_RDWR) = 20
fstat(20, {st_mode=S_IFREG|0600, st_size=229456, ...}) = 0
mmap(NULL, 245760, PROT_READ, MAP_SHARED, 20, 0) = 0x7f8473107000
fcntl(20, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
stat("/var/spool/cyrus/mail/e/user/elangenhoven/cyrus.index", 
{st_mode=S_IFREG|0600, st_size=229456, ...}) = 0
open("/var/spool/cyrus/mail/e/user/elangenhoven/cyrus.header", O_RDONLY) = 21
fstat(21, {st_mode=S_IFREG|0600, st_size=266, ...}) = 0
mmap(NULL, 266, PROT_READ, MAP_SHARED, 21, 0) = 0x7f847320b000
munmap(0x7f847320b000, 266) = 0
open("/var/spool/cyrus/mail/e/user/elangenhoven/cyrus.expunge", O_RDWR) = -1 
ENOENT (No such file or directory)
fcntl(20, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
sendto(14, "\0\0\0\0\0\0\0\0user.elangenhoven\0", 26, MSG_DONTWAIT, 
{sa_family=AF_UNIX, sun_path="/var/run/cyrus/socket/idle"}, 110) = 26
fcntl(20, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
stat("/var/spool/cyrus/mail/e/user/elangenhoven/cyrus.index", 
{st_mode=S_IFREG|0600, st_size=229456, ...}) = 0
close(21)   = 0
open("/var/spool/cyrus/mail/e/user/elangenhoven/cyrus.header", O_RDONLY) = 21
fstat(21, {st_mode=S_IFREG|0600, st_size=266, ...}) = 0
mmap(NULL, 266, PROT_READ, MAP_SHARED, 21, 0) = 0x7f84

Re: IDLE not working for one account only

2018-06-05 Thread Neil Price
I've attached an strace of idled. It shows the bad user client 
(elangenhoven) going into idle and a message being sent to it.You can 
see the message being sent but there seems to be no reaction to it arriving.


There are a bunch of timeouts there?


On 05/06/2018 15:42, Bron Gondwana wrote:
Damn.  I guess I'm going to have to ask for an strace next!  Of the 
idled process probably.


Idle changed a bunch between 2.5 and 3.0, so I don't know how much 
I'll be able to help :( Definitely an strace of the idled during both 
the start of the IDLE command and the delivery will help see what's 
happening.


Bron.




strace: Process 27938 attached
pselect6(15, [14], NULL, NULL, {tv_sec=0, tv_nsec=934988419}, {[], 8}) = 0 
(Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 1 (in [14], 
left {tv_sec=0, tv_nsec=778994336})
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
recvfrom(14, "\0\0\0\0\0\0\0\0user.elangenhoven\0", 1032, 0, 
{sa_family=AF_UNIX, sun_path="/var/lib/cyrus/socket/idle.30947"}, [110->35]) = 
26
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/lib/cyrus/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or 
directory)
rt_sigprocmask(SIG_BLOCK, [INT QUIT ALRM TERM CHLD], [], 8) = 0
pselect6(15, [14], NULL, NULL, {tv_sec=1, tv_nsec=0}, {[], 8}) = 1 (in [14], 
left {tv_sec=0, tv_nsec=718545052})
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
recvfrom(14, "\2\0\0\0\0\0\0\0user.elangenhoven\0", 1032, 0, 
{sa_family=AF_UNIX, sun_path="/var/lib/cyrus/socket/idle.31167"}, [110->35]) = 
26
sendto(14, "\2\0\0\0\0\0\0

Re: IDLE not working for one account only

2018-06-05 Thread Neil Price

Nothing, only mention of idle is on shutdown


On 05/06/2018 14:35, Bron Gondwana wrote:

What's showing up in syslog?




Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: IDLE not working for one account only

2018-06-05 Thread Neil Price
Here's a comparison of a non-working idle with a good one. You can see 
the bad user does not report message arrival while the good one does.
Looks like something odd with the /seen flags ("nonjunk" is missing) . 
Can someone explain what it means?

This account was converted from 2.2 I wonder if that's it. ?

Bad user:
telnet 127.0.0.1 143
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN SASL-IR] ctgw-3 
Cyrus IMAP 2.5.10-Debian-2.5.10-3 server ready

a01 login baduser secret
a01 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ 
SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT THREAD=REFERENCES 
ANNOTATEMORE ANNOTATE-EXPERIMENT-1 METADATA LIST-EXTENDED LIST-STATUS 
LIST-MYRIGHTS WITHIN QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE 
CREATE-SPECIAL-USE URLAUTH URLAUTH=BINARY LOGINDISABLED COMPRESS=DEFLATE 
X-QUOTA=STORAGE X-QUOTA=MESSAGE X-QUOTA=X-ANNOTATION-STORAGE 
X-QUOTA=X-NUM-FOLDERS IDLE] User logged in 
SESSIONID=

a02 select inbox
* 2591 EXISTS
* 2 RECENT
* FLAGS (\Answered \Flagged \Draft \Deleted \Seen $Forwarded icc-forward 
$MDNSent)
* OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen 
$Forwarded icc-forward $MDNSent \*)] Ok

* OK [UNSEEN 2589] Ok
* OK [UIDVALIDITY 1485844192] Ok
* OK [UIDNEXT 14864] Ok
* OK [HIGHESTMODSEQ 1] Ok
* OK [URLMECH INTERNAL] Ok
* OK [ANNOTATIONS 65536] Ok
a02 OK [READ-WRITE] Completed
a03 idle
+ idling

(Nothing reported when message sent to this address)
--
Now the good client
telnet 127.0.0.1 143
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN SASL-IR] ctgw-3 
Cyrus IMAP 2.5.10-Debian-2.5.10-3 server ready

a01 login gooduser evenmoresecret
a01 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ 
SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT THREAD=REFERENCES 
ANNOTATEMORE ANNOTATE-EXPERIMENT-1 METADATA LIST-EXTENDED LIST-STATUS 
LIST-MYRIGHTS WITHIN QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE 
CREATE-SPECIAL-USE URLAUTH URLAUTH=BINARY LOGINDISABLED COMPRESS=DEFLATE 
X-QUOTA=STORAGE X-QUOTA=MESSAGE X-QUOTA=X-ANNOTATION-STORAGE 
X-QUOTA=X-NUM-FOLDERS IDLE] User logged in 
SESSIONID=

a02 select inbox
* 11664 EXISTS
* 0 RECENT
* FLAGS (\Answered \Flagged \Draft \Deleted \Seen nonjunk $has_cal 
$Forwarded $MDNSent junk $label3 $label2 icc-forward $label1 $label4)
* OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen nonjunk 
$has_cal $Forwarded $MDNSent junk $label3 $label2 icc-forward $label1 
$label4 \*)] Ok

* OK [UNSEEN 10133] Ok
* OK [UIDVALIDITY 1522916393] Ok
* OK [UIDNEXT 18594] Ok
* OK [HIGHESTMODSEQ 33536] Ok
* OK [URLMECH INTERNAL] Ok
* OK [ANNOTATIONS 65536] Ok
a02 OK [READ-WRITE] Completed
a03 idle
+ idling
* 11665 EXISTS
* 1 RECENT
* 11665 FETCH (FLAGS (\Recent nonjunk))


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: IDLE not working for one account only

2018-06-05 Thread Neil Price

On 05/06/2018 09:17, Neil Price wrote:

I'm using 2.5.10-3 (the one that comes with debian stretch)

I have one user that I cannot get IDLE to work for using either poll 
or idled.


Other accounts work normally. No errors in the log.

Have set him up with a number of email clients and they all do the 
same thing.


I now have a second user who was working fine until we added a second 
imap client (Android) for her. Now the primary imap client does work 
with idle (but the Android client does).

:-\


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: IDLE not working for one account only

2018-06-05 Thread Neil Price

On 05/06/2018 12:19, Geoff Winkless wrote:

On Tue, 5 Jun 2018 at 08:17, Neil Price  wrote:

I can not see anything the account setup that can cause this, suggestions?

Running behind an overly-aggressive TCP proxy?

There is no proxy involved. They are all on the same physical network.

What does tcpdump/wireshark show?

What am I looking for? The only thing I see which is relevant after a 
mail has been sent is


12:56:23.475625 IP (tos 0x0, ttl 64, id 34941, offset 0, flags [DF], 
proto TCP (6), length 82)
    ctgw-3.ad.gibb.co.za.imap2 > 192.168.102.228.61763: Flags [P.], 
cksum 0x4cb5 (incorrect -> 0xa2e7), seq 20:62, ack 19, win 229, length 42
12:56:23.475680 IP (tos 0x0, ttl 64, id 34942, offset 0, flags [DF], 
proto TCP (6), length 40)
    ctgw-3.ad.gibb.co.za.imap2 > 192.168.102.228.61763: Flags [F.], 
cksum 0x4c8b (incorrect -> 0x1866), seq 62, ack 19, win 229, length 0
12:56:23.475911 IP (tos 0x0, ttl 127, id 3446, offset 0, flags [DF], 
proto TCP (6), length 40)
    192.168.102.228.61763 > ctgw-3.ad.gibb.co.za.imap2: Flags [.], 
cksum 0x1148 (correct), seq 19, ack 63, win 2051, length 0
12:56:23.476233 IP (tos 0x0, ttl 127, id 3447, offset 0, flags [DF], 
proto TCP (6), length 40)
    192.168.102.228.61763 > ctgw-3.ad.gibb.co.za.imap2: Flags [F.], 
cksum 0x1147 (correct), seq 19, ack 63, win 2051, length 0
12:56:23.476256 IP (tos 0x0, ttl 64, id 6556, offset 0, flags [DF], 
proto TCP (6), length 40)
    ctgw-3.ad.gibb.co.za.imap2 > 192.168.102.228.61763: Flags [.], 
cksum 0x1865 (correct), seq 63, ack 20, win 229, length 0
12:56:23.915208 IP (tos 0x0, ttl 63, id 21520, offset 0, flags [DF], 
proto TCP (6), length 52)
    192.168.102.146.58600 > ctgw-3.ad.gibb.co.za.8008: Flags [.], cksum 
0xea47 (correct), seq 1364296473, ack 954946665, win 245, options 
[nop,nop,TS val 1683933952 ecr
12:56:23.915224 IP (tos 0x0, ttl 64, id 965, offset 0, flags [DF], proto 
TCP (6), length 52)


where ctgw-3.ad.gibb.co.za is the cyrus server and 192.168.102.228 is 
currently the misbehaving client.




Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

IDLE not working for one account only

2018-06-05 Thread Neil Price

I'm using 2.5.10-3 (the one that comes with debian stretch)

I have one user that I cannot get IDLE to work for using either poll or 
idled.


Other accounts work normally. No errors in the log.

Have set him up with a number of email clients and they all do the same 
thing.


I can not see anything the account setup that can cause this, suggestions?


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


caldavzap with 2.5.10

2018-05-04 Thread Neil Price
I'm trying to get caldavzap 0.12 to work with 2.5.10-3 (the one that 
comes with debian stretch)


Caldavzap works fine if I get cyrus httpd to serve it up but I have a 
reason to want to get it to work on apache + cyrus.


But on apache it stops at this point (in java console):

"Error: [netCheckAndCreateConfiguration: 'PROPFIND 
http://myserver:8008/dav/principals/user'] code: '0' status: 'error' - 
see https://www.inf-it.com/caldavzap/readme.txt (cross-domain setup)"


cyrus and caldavzap are on the same server but obviously different 
ports. I understand this to be a cross-domain setup (although curiously 
caldavzap's auto-cross-domain detection routine does not think so, so I 
force it on)


I've configured the config.js as in the docs here 
https://www.cyrusimap.org/docs/cyrus-imapd/2.5.0/install-http.php


And also set the httpdallowcors with "http://myserver";

Caldavzap docs say you should see these headers with cross-domain:

Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PROPFIND, 
PROPPATCH, REPORT, PUT, MOVE, DELETE, LOCK, UNLOCK
Access-Control-Allow-Headers: User-Agent, Authorization, 
Content-type, Depth, If-match, If-None-Match, Lock-Token, Timeout, Destination, 
Overwrite, Prefer, X-client, X-Requested-With
Access-Control-Expose-Headers: Etag, Preference-Applied

But this what I get

OPTIONS * HTTP/1.0

HTTP/1.1 200 OK
Connection: close
Date: Fri, 04 May 2018 10:37:52 GMT
Cache-Control: no-cache
Server: Cyrus/2.5.10-Debian-2.5.10-3 Cyrus-SASL/2.1.27 OpenSSL/1.1 Zlib/1.2.8 
LibXML2.9.4 SQLite/3.16.2 Libical/2.0 ICU4C/57.1 Jansson/2.9
DAV: 1, 2, 3, access-control, extended-mkcol
DAV: calendar-access, calendar-availability, calendar-auto-schedule
DAV: addressbook
Allow: OPTIONS, GET, HEAD, POST, PUT, DELETE
Allow: PROPFIND, REPORT, COPY, MOVE, LOCK, UNLOCK, PROPPATCH, MKCOL, ACL
Allow: MKCALENDAR
Content-Length: 0

Does this mean it won't work or is this functionally the same?
Or does the fact that it is failing on propfind mean it is some authentication 
problem?
Would it help to go a later version of cyrus imap?


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus