Re: v2.2.15 - make check - Conditional jump or move depends on uninitialised value

2014-12-01 Thread Teemu Huovila
On 11/30/2014 05:53 AM, AMM wrote:
 __strspn_sse42 (in /lib64/libc-2.14.90.so)
Is it possible that you are encountering this issue? 
https://bugs.kde.org/show_bug.cgi?id=270925
Either way, the error seems to stem from your libc implementation (if it is not 
the valgrind bug).

If possible, upgrade your valgrind, libc etc.

br,
Teemu Huovila


Re: v2.2.15 - make check - Conditional jump or move depends on uninitialised value

2014-12-01 Thread AMM


On Monday 01 December 2014 03:41 PM, Teemu Huovila wrote:

On 11/30/2014 05:53 AM, AMM wrote:

__strspn_sse42 (in /lib64/libc-2.14.90.so)

Is it possible that you are encountering this issue? 
https://bugs.kde.org/show_bug.cgi?id=270925
Either way, the error seems to stem from your libc implementation (if it is not 
the valgrind bug).

If possible, upgrade your valgrind, libc etc.

br,
Teemu Huovila


Thank you for reply.

But Dovecot 2.2.10 (and earlier versions) were not throwing this error.

Can I can ignore it by NOT doing make check?

OR

is it something serious that if I ignore it can corrupt mailboxes?

Unfortunately for some reasons I can not update libc or valgrind.

Amm


SORT capability

2014-12-01 Thread absolutely_f...@libero.it
Hi,

why I don't see SORT capability on my dovecot server?

# telnet localhost 143
Trying ::1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE 
STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
1 capability
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS 
AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5
1 OK Capability completed.
a logout
* BYE Logging out
a OK Logout completed.
Connection closed by foreign host.

I am using 

# dovecot --version
2.0.9

default CentOS rpm package.
Thank you


Re: SORT capability

2014-12-01 Thread Reindl Harald



Am 01.12.2014 um 12:19 schrieb absolutely_f...@libero.it:

why I don't see SORT capability on my dovecot server?

# telnet localhost 143
Trying ::1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE 
STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
1 capability
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS 
AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5
1 OK Capability completed.
a logout
* BYE Logging out
a OK Logout completed.
Connection closed by foreign host


DUNNO

mabye output of dovecot -n knows



signature.asc
Description: OpenPGP digital signature


Re: SORT capability

2014-12-01 Thread Reindl Harald



Am 01.12.2014 um 12:32 schrieb absolutely_f...@libero.it:

# dovecot -n |grep -i sort

(nothing)


i meant post the complete output
you can't grep for something not existing
but you or some config-include may set something wrong


Maybe to full list is only available after authentication?


likely


# telnet localhost 143
Trying ::1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
a login XXX 
a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN
NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT
SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in


Messaggio originale
Da: h.rei...@thelounge.net
Data: 01/12/2014 12.21
A: dovecot@dovecot.org
Ogg: Re: SORT capability

Am 01.12.2014 um 12:19 schrieb absolutely_f...@libero.it:

why I don't see SORT capability on my dovecot server?

# telnet localhost 143
Trying ::1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE

STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.

1 capability
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE

STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5

1 OK Capability completed.
a logout
* BYE Logging out
a OK Logout completed.
Connection closed by foreign host


DUNNO

mabye output of dovecot -n knows




signature.asc
Description: OpenPGP digital signature


R: Re: SORT capability

2014-12-01 Thread absolutely_f...@libero.it
Here's my conf:

# dovecot -n
# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.6 (Final)
auth_mechanisms = plain login digest-md5 cram-md5
disable_plaintext_auth = no
first_valid_gid = 89
first_valid_uid = 89
mail_gid = 89
mail_location = maildir:/coraid-s2l2/domains
mail_uid = 89
maildir_very_dirty_syncs = yes
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date imapflags notify
mbox_write_locks = fcntl
namespace {
  inbox = yes
  location =
  prefix = INBOX.
  separator = .
  type = private
}
passdb {
  args = /etc/dovecot/dovecot-sql.conf.ext
  driver = sql
}
passdb {
  args = /etc/dovecot/dovecot-sql-crypt.conf.ext
  driver = sql
}
plugin {
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
  sieve_extensions = +notify +imapflags
  sieve_max_script_size = 1M
}
protocols = imap pop3 lmtp sieve
service imap-login {
  service_count = 0
}
service pop3-login {
  service_count = 0
}
ssl_cert = /etc/nginx/ssl/wildcard.crt
ssl_key = /etc/nginx/ssl/wildcard.key
userdb {
  args = /etc/dovecot/dovecot-sql.conf.ext
  driver = sql
}
protocol lmtp {
  mail_plugins =
}
protocol lda {
  mail_plugins =
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}



Messaggio originale
Da: h.rei...@thelounge.net
Data: 01/12/2014 12.37
A: dovecot@dovecot.org
Ogg: Re: SORT capability



Am 01.12.2014 um 12:32 schrieb absolutely_f...@libero.it:
 # dovecot -n |grep -i sort

 (nothing)

i meant post the complete output
you can't grep for something not existing
but you or some config-include may set something wrong

 Maybe to full list is only available after authentication?

likely

 # telnet localhost 143
 Trying ::1...
 Connected to localhost.
 Escape character is '^]'.
 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
 STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot 
ready.
 a login XXX 
 a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
 SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT 
CHILDREN
 NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT
 SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in

 Messaggio originale
 Da: h.rei...@thelounge.net
 Data: 01/12/2014 12.21
 A: dovecot@dovecot.org
 Ogg: Re: SORT capability

 Am 01.12.2014 um 12:19 schrieb absolutely_f...@libero.it:
 why I don't see SORT capability on my dovecot server?

 # telnet localhost 143
 Trying ::1...
 Connected to localhost.
 Escape character is '^]'.
 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE 
IDLE
 STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot 
ready.
 1 capability
 * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
 STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5
 1 OK Capability completed.
 a logout
 * BYE Logging out
 a OK Logout completed.
 Connection closed by foreign host

 DUNNO

 mabye output of dovecot -n knows




Re: v2.2.15 - make check - Conditional jump or move depends on uninitialised value

2014-12-01 Thread Teemu Huovila
On 12/01/2014 12:41 PM, AMM wrote:
 
 On Monday 01 December 2014 03:41 PM, Teemu Huovila wrote:
 But Dovecot 2.2.10 (and earlier versions) were not throwing this error.
This test was added in Dovecot version 2.2.14. It is also the only reference to 
strspn() in the whole project.

 Can I can ignore it by NOT doing make check?
I would say you can safely ignore it, but I can give no guarantee. I have no 
access to a Fedora 16 system, so I can not verify
it, but I would say this is most likely a manifestation of the valgrind bug I 
linked in my first email.

You could try verification yourself, by using the Steps to Reproduce in the 
linked issue tracker.

br,
Teemu Huovila


Re: v2.2.15 - make check - Conditional jump or move depends on uninitialised value

2014-12-01 Thread AMM


On Monday 01 December 2014 05:24 PM, Teemu Huovila wrote:

On 12/01/2014 12:41 PM, AMM wrote:

On Monday 01 December 2014 03:41 PM, Teemu Huovila wrote:
But Dovecot 2.2.10 (and earlier versions) were not throwing this error.

This test was added in Dovecot version 2.2.14. It is also the only reference to 
strspn() in the whole project.
...
You could try verification yourself, by using the Steps to Reproduce in the 
linked issue tracker.

br,
Teemu Huovila


Verified it. It is indeed valgrind bug.

Thanks for the help.

Amm.


Dovecot Director and Dovecot proxy

2014-12-01 Thread rub zorghy
Hi,

Dovecot Director is used to keep a temporary user - Dovecot backend server
mapping. So, Director decides which backend handles each user and the user
is always redirected to the same server. All user data is stored in shared
storage (NFS).
The Dovecot presentation featured during this webinar
http://knowledgebase.open-xchange.com/fileadmin/user_upload/open-xchange/misc/webinar/2013_21_08/Dovecot_Webinar_21.08.2013.pdf
mentions (slide 7) a Dovecot proxy cluster (doing credentials and user info
lookup) behind the LB device (F5 Big-IP)

Why Dovecot Director server isn't used to perform this without Dovecot
proxy ? Thus, the load balancer (F5 Big-IP) can distribute requests based
on IMAP protocol to Dovecot Director cluster.

Thx so much.

gdrub


Re: best file system ?

2014-12-01 Thread Alessio Cecchi


Il 01/12/2014 17:24, absolutely_f...@libero.it ha scritto:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server 
(pop3/imap/webmail) purpose?
Thank you

Hi,

XFS, if you can use RHEL/CentOS 6, ext4 with others distro.

I used XFS (with 20k users) until I switched to a NetApp (and now I'm 
really happy).


Ciao


Re: best file system ?

2014-12-01 Thread Bertrand Caplet
 I used XFS (with 20k users) until I switched to a NetApp (and now I'm
 really happy).
Yes, I'd say NetApp is pretty good, we are using this type of storage at
work.

Regards
-- 
CHUNKZ.NET - casual fiddler and computer technician
Bertrand Caplet, Flers (FR)
Feel free to send encrypted/signed messages
Key ID: FF395BD9
GPG FP: DE10 73FD 17EB 5544 A491 B385 1EDA 35DC FF39 5BD9



signature.asc
Description: OpenPGP digital signature


Re: Dovecot Director and Dovecot proxy

2014-12-01 Thread Alessio Cecchi


Il 01/12/2014 17:11, rub zorghy ha scritto:

Why Dovecot Director server isn't used to perform this without Dovecot
proxy ? Thus, the load balancer (F5 Big-IP) can distribute requests based
on IMAP protocol to Dovecot Director cluster.
I think that the slide is just one example of a scenario ,very complex. 
In real world,
unless you do not have to segment users (some users use Exchange, others 
use Dovecot, but all user use imap.corporate.com, the proxy, for login) 
you don't need a Proxy in front of Director.


Load balancer is only for HA.

Ciao


Re: best file system ?

2014-12-01 Thread Sami Ketola

 On 01 Dec 2014, at 18:24, absolutely_f...@libero.it wrote:
 
 Hi,
 I'm going to set up a new storage for our email users (about 10k).
 It's a network attached storage (Coraid).
 In your opinion, what is the best file system for mail server 
 (pop3/imap/webmail) purpose?

Depends on what OS you have chosen, or if OS is not the limiter I would go with 
ZFS.

Sami


Re: Dovecot 2.2.15, Panic: file mbox-sync.c: line 152 (mbox_sync_read_next_mail): assertion failed:

2014-12-01 Thread Mark Sapiro
On 12/01/2014 12:56 AM, Teemu Huovila wrote:
 Please see http://dovecot.markmail.org/thread/xqu3yr52c6hjxqk2


Thank you. I'll install the patches. Since the Panic is very rare on my
server, I won't really know if they help, but this look like my issue.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan


Re: Dovecot Director and Dovecot proxy

2014-12-01 Thread anon_user

On 2014-12-01 19:56, anon_u...@openmailbox.org wrote:

Il 01/12/2014 17:11, rub zorghy ha scritto:
Why Dovecot Director server isn't used to perform this without Dovecot
proxy ? Thus, the load balancer (F5 Big-IP) can distribute requests 
based

on IMAP protocol to Dovecot Director cluster.
I think that the slide is just one example of a scenario ,very
complex. In real world,
unless you do not have to segment users (some users use Exchange,
others use Dovecot, but all user use imap.corporate.com, the proxy,

for login) you don't need a Proxy in front of Director.

Load balancer is only for HA.

Ciao


Hello,

So, dovecot director can work without dovecot proxy ?

Thanks.


Re: SORT capability

2014-12-01 Thread Michael M Slusarz

Quoting absolutely_f...@libero.it:


why I don't see SORT capability on my dovecot server?

# telnet localhost 143
Trying ::1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID  
ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5  
AUTH=CRAM-MD5] Dovecot ready.

1 capability
* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE  
IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5

1 OK Capability completed.


Because you are not authenticated.  SORT isn't used in the not  
authenticated state.


michael


Re: best file system ?

2014-12-01 Thread Marcin Mirosław
W dniu 2014-12-01 o 18:19, Alessio Cecchi pisze:
 
 Il 01/12/2014 17:24, absolutely_f...@libero.it ha scritto:
 Hi,
 I'm going to set up a new storage for our email users (about 10k).
 It's a network attached storage (Coraid).
 In your opinion, what is the best file system for mail server
 (pop3/imap/webmail) purpose?
 Thank you
 Hi,
 
 XFS, if you can use RHEL/CentOS 6, ext4 with others distro.

Hi!
Does XFS works better on RHEL than on others distro?;)


Re: best file system ?

2014-12-01 Thread Reindl Harald



Am 01.12.2014 um 21:13 schrieb Marcin Mirosław:

W dniu 2014-12-01 o 18:19, Alessio Cecchi pisze:


Il 01/12/2014 17:24, absolutely_f...@libero.it ha scritto:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server
(pop3/imap/webmail) purpose?
Thank you

Hi,

XFS, if you can use RHEL/CentOS 6, ext4 with others distro.


Hi!
Does XFS works better on RHEL than on others distro?;)


XFS is the default system of *RHEL7/CentOS7*
no idea from where it comes that is is recommended for CentOS6



signature.asc
Description: OpenPGP digital signature


Re: best file system ?

2014-12-01 Thread Robert Nowotny


Am 2014-12-01 um 21:16 schrieb Reindl Harald:



Am 01.12.2014 um 21:13 schrieb Marcin Mirosław:

W dniu 2014-12-01 o 18:19, Alessio Cecchi pisze:


Il 01/12/2014 17:24, absolutely_f...@libero.it ha scritto:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server
(pop3/imap/webmail) purpose?
Thank you

Hi,

XFS, if you can use RHEL/CentOS 6, ext4 with others distro.


Hi!
Does XFS works better on RHEL than on others distro?;)


XFS is the default system of *RHEL7/CentOS7*
no idea from where it comes that is is recommended for CentOS6



definitely ZFS on BSD or on Solaris. And ECC Ram on the Server.

check it out :  http://serverfault.com/questions/190/zfs-vs-xfs

and

http://louwrentius.com/please-use-zfs-with-ecc-memory.html


Re: best file system ?

2014-12-01 Thread Alexander Dalloz

Am 01.12.2014 um 17:24 schrieb absolutely_f...@libero.it:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server 
(pop3/imap/webmail) purpose?
Thank you



If it is a NAS, as you state, then you don't have to think about the 
filesystem, because the storage unit does not provide block devices for 
filesystem creation.


Else - in case you get block storage instead of NAS - best filesystem 
depends on a lot of parameters. If there would be a best one, then there 
wouldn't be room for several choices.


Alexander


Adding extra fields from an external source

2014-12-01 Thread Ian Allison
Hi,

I have an existing (Open)LDAP which I'm using with dovecot and I would
like to implement quotas. I have global quotas working, but I would like
per user quotas similar to what is described in the wiki
(http://wiki2.dovecot.org/Quota/Configuration#LDAP) My problem is that
there is no obvious attribute in the schemas shipped in the RHEL/Centos
6 to hold the quota string.

Is it possible to get User database extra fields from an external
source? e.g. flat file or MySQL table. I would like to pull everything
else from LDAP but just fill out quota_rule from a different source.

I realize I could expand my LDAP but I'm wary of just importing some
random schema. I've had mixed results doing that in the past (the qmail
schema (http://www.zytrax.com/books/ldap/ape/qmail.html) was
incompatible with my existing structure, and at the moment I'm using a
hacked version of the linux quota project's LDAP schema
(http://sourceforge.net/projects/linuxquota/) - I'd rather have
something a bit more official). If there is a recommended schema that
you guys use which is stable and works well I would like to give that a
try.

-Thanks,
Ian.


disabling certain ciphers

2014-12-01 Thread Will Yardley
Can you use both ssl_protocols *and* ssl_cipher_list in the same config
(in a way that's sane)?

ssl_protocols (= 2.1)
and 
ssl_cipher_list
co-exist, or are they mutually exclusive?

I have a Dovecot 2.2.13 system, and I tried setting:

I also tried things like
ssl_cipher_list = HIGH
or 
ssl_cipher_list = HIGH:!MEDIUM:!LOW

however, doing this seems to make v3 still work unless I explicitly do
!SSLv3 in ssl_cipher_list in addition to disabling it in $ssl_protocols.
This is different from Apache, which has similar parameters, but where
disabling the protocol takes precedence.

If I just do:
ssl_protocols = !SSLv2 !SSLv3

I still get some ciphers that show up as weak, e.g.,
|   SSLv3: 
| ciphers: 
|   TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA - strong
|   TLS_DHE_RSA_WITH_AES_128_CBC_SHA - strong
|   TLS_DHE_RSA_WITH_AES_256_CBC_SHA - strong
|   TLS_DHE_RSA_WITH_DES_CBC_SHA - weak
[]
|   TLS_RSA_WITH_DES_CBC_SHA - weak

Is there a way to exclude these ciphers, while still keeping my config
easy to parse and avoiding duplicative or deprecated configs?

The behavior is also pretty strange; if I have something like one of the
following, with or without $ssl_protocols set to exclude SSLv2 and SSLv3:

ssl_cipher_list = HIGH:!MEDIUM:!LOW:!SSLv3
ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:+HIGH:!MEDIUM

TLS v1.0 and v1.1 get disabled as well.
I also can't seem to explicitly enable TLS 1.0 or 1.1 in
$ssl_cipher_list.

w


Re: disabling certain ciphers

2014-12-01 Thread Darren Pilgrim

On 12/1/2014 4:43 PM, Will Yardley wrote:

Can you use both ssl_protocols *and* ssl_cipher_list in the same config
(in a way that's sane)?



Is there a way to exclude these ciphers, while still keeping my config
easy to parse and avoiding duplicative or deprecated configs?


Yes to both.  If you need to support older clients:

ssl_cipher_list = HIGH:!RC4:!MD5:!SRP:!PSK:!aNULL:@STRENGTH
ssl_dh_parameters_length = 2048
ssl_parameters_regenerate = 0
ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2

If your userbase is limited to current clients and OSes, you can take it 
a bit further:


ssl_cipher_list = HIGH+kEECDH:HIGH+kEDH:!3DES:!aNULL:@STRENGTH
ssl_dh_parameters_length = 4096
ssl_parameters_regenerate = 0
ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2

This drops 3DES support and makes forward secrecy mandatory.


Re: disabling certain ciphers

2014-12-01 Thread Will Yardley
On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote:
 On 12/1/2014 4:43 PM, Will Yardley wrote:
  Can you use both ssl_protocols *and* ssl_cipher_list in the same config
  (in a way that's sane)?
 
  Is there a way to exclude these ciphers, while still keeping my config
  easy to parse and avoiding duplicative or deprecated configs?
 
 Yes to both.  If you need to support older clients:
 
 ssl_cipher_list = HIGH:!RC4:!MD5:!SRP:!PSK:!aNULL:@STRENGTH
 ssl_dh_parameters_length = 2048
 ssl_parameters_regenerate = 0
 ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2

But why does ssl_protocols behave differently depending on if
$ssl_cipher_list is defined? Shouldn't !SSLv2 and !SSLv3 be sufficient?

It seems that if ssl_cipher_list is defined,
ssl_protocols = !SSLv2 !SSLv3 

results in TLS1.2 being the only one active, but if it is defined, 1.0,
1.1, and 1.2 are all active?

w
 


Re: best file system ?

2014-12-01 Thread Angel L. Mateo

El 01/12/14 a las 18:45, Sami Ketola escribió:



On 01 Dec 2014, at 18:24, absolutely_f...@libero.it wrote:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server 
(pop3/imap/webmail) purpose?


Depends on what OS you have chosen, or if OS is not the limiter I would go with 
ZFS.


Have you any performance comparison with xfs?

	I'm running two imap servers. One with about 9k accounts and 3.5TB of 
storage, and another with 55k accounts and 2TB of storage with XFS, and 
I'm thinking about migrating them from XFS to ZFS but I'm concern about 
IO performance of ZFS. When we developed these two servers, I remember 
reading some zfs performance problems in comparison with xfs (I have 
lost the link) and that was the reason to finally use xfs, but now we 
are having problems with LVM snapshots and we also like some zfs 
features (like replication) so we are thinking about the change.



--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868887590
Fax: 86337


Re: best file system ?

2014-12-01 Thread Angel L. Mateo

El 01/12/14 a las 17:24, absolutely_f...@libero.it escribió:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server 
(pop3/imap/webmail) purpose?
Thank you

	And another related question... Does anybody of you have any experience 
with distributed filesystems like lustre or ceph? How is the performance 
of them in comparison with legacy filesystems like xfs?


--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868887590
Fax: 86337


Re: best file system ?

2014-12-01 Thread Alessio Cecchi


Il 01/12/2014 21:13, Marcin Mirosław ha scritto:

W dniu 2014-12-01 o 18:19, Alessio Cecchi pisze:

Il 01/12/2014 17:24, absolutely_f...@libero.it ha scritto:

Hi,
I'm going to set up a new storage for our email users (about 10k).
It's a network attached storage (Coraid).
In your opinion, what is the best file system for mail server
(pop3/imap/webmail) purpose?
Thank you

Hi,

XFS, if you can use RHEL/CentOS 6, ext4 with others distro.

Hi!
Does XFS works better on RHEL than on others distro?;)
Yes, because in the kernel of RHEL (= 6) there are some patchs/options 
(like delaylog) not present in others distro (like Debian 6) with 
default kernel.