Re: [Dovecot] Unkillable imap process?

2009-01-02 Thread nuitari-dovecot

# OS: Linux 2.6.27.7-9-pae i686 openSUSE 11.1 (i586) ext3


There is a known bug with that kernel and fam. Update your kernel or 
deactivat efam.


Re: [Dovecot] unkillable imap process(es) with high CPU-usage

2008-12-15 Thread nuitari-dovecot

So where are kernel issues reported? I will try to find out.


Linux kernel mailing list is probably the best place. I could also write
a summary mail about this and Cc it to you all who have had the problem.


Please cc me on it, I'd rather not have to subscribe to the lkml again.


Re: [Dovecot] Dovecot imap processes pinning CPU

2008-12-15 Thread nuitari-dovecot

On Mon, 15 Dec 2008, Steffen Weber wrote:

Just saw this thread on 
http://dovecot.org/list/dovecot/2008-December/035707.html and I hope that 
this email gets through (I'm not subscribed).


The described behaviour seems to be a bug in Linux 2.6.27.8: 
http://lkml.indiana.edu/hypermail/linux/kernel/0812.1/6.html


This fix seems to work for me: 
http://lkml.indiana.edu/hypermail/linux/kernel/0812.1/00998.html


It is not fixed in 2.6.27.9, but will be fixed in 2.6.27.10 according to Greg 
KH: http://lkml.org/lkml/2008/12/14/162


Hope that helps
Steffen


Thanks, I've cancelled the bisect I was doing after hitting a kernel panic 
today. Not so good to do one on a production box unfortunately.


I will try that patch.


Re: [Dovecot] Dovecot imap processes pinning CPU

2008-12-13 Thread nuitari-dovecot

 Wow.  Yeah, *some*thing's changed recently to cause this.  If I had to
 guess, I'd say it's a recent Thunderbird upgrade that's triggering it, as
 it's been 2-3 weeks since my last dovecot upgrade.


Some other interesting data points:

* This problem seems to happen when I use Thunderbird (both on Linux and 
Windows) as my MUA, but not with Squirrelmail.


* The IMAP process seem to start going haywire when I shut Thunderbird down.


Thunderbird would use the inotify stuff, but I don't think squirrelmail 
does since it's web based.


On the installation where a pinned process is, the 2 people accessing that 
maildir are using Outlook. They both use Outlook.


One of them has the specific version:
Microsoft Office Outlook 2007 (12.0.6316.5000) SP1 MSO (12.0.6320.5000)

And I'm sure the other one will have some version of Outlook 2007, but I 
haven't been able to get in touch with them yet.


Re: [Dovecot] Firewalls are [essentially] free - WAS: Re: Source patches from Apple

2008-12-13 Thread nuitari-dovecot


Your argument is bogus - see above... again, a basic, properly
configured firewall has negligible impact on pretty much any systems
resources, even ancient ones...

So, yeah, enabling a firewall on a mail server is essentially free,
whether talking impact on system resources, or dollar cost.


Why would I threaten the much-loved near-instantaneous response of my mail 
servers by spending resources there that are better spent on my border 
routers, whose CPUs sit at 90% idle time unless they're doing a BGP update?


Because even a firewall with a huge list of hosts to block will be faster 
then handling a ton of bogus logins from bots and script kiddies.


Because a border router can't tell if a connection coming from an IP is 
bad or not without deep packet inspection, and of course you have the 
results on the mail server itself. Also blocking all of these bogus 
requests at the iptables level will stop them from using any further 
resources.


You're right, it's not 'free', but the costs of doing it are cheaper then 
having to handle a tons of bogus authentication, and the consequences less 
dire if they actually manage to find a working login name and password.


If they do find a working login name and password they are going to start 
hitting the SMTP server with it and then if they do get it to be in relay 
mode (either through SMTP AUTH or POP-before-SMTP) then you'll end up 
spewing spam and that will cost you a lot more resources then the firewall 
ever will.


[Dovecot] Problem with imap running at 100%

2008-12-12 Thread nuitari-dovecot
I was doing some checks on a server and found an imap process running at 
100%, kill -9 was unable to kill it.


hammer ~ # lsof -p 1918
COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFFNODE NAME
imap1918 vpopmail  cwdDIR8,2   96  539699 
/var/vpopmail/domains/maxpersuasion.com/kec
imap1918 vpopmail  rtdDIR8,2  856   2 /
imap1918 vpopmail  txtREG8,2   851832 3646578 
/usr/libexec/dovecot/imap
imap1918 vpopmail  memREG8,2  1330888 2752698 /lib64/libc-2.8.so
imap1918 vpopmail  memREG8,214520 2753738 /lib64/libdl-2.8.so
imap1918 vpopmail  memREG8,2   114960 2753800 /lib64/ld-2.8.so
imap1918 vpopmail2w  FIFO0,5  0t0  574015 pipe
imap1918 vpopmail6u  0,60  10 anon_inode

strace  gdb can't seem to attach to the process.

The process was started 2 days ago.

It is dovecot 1.1.6


Re: [Dovecot] Problem with imap running at 100%

2008-12-12 Thread nuitari-dovecot
I was doing some checks on a server and found an imap process running at 
100%, kill -9 was unable to kill it.


What OS/distribution and kernel version are you using?


Gentoo with 2.6.27-gentoo-r5
amd64, 2 dual core opterons

I think the user uses Outlook though, but I can check