Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Charles Marcus
On 10/2/2009 8:14 AM, Vitaliy Vladimirovich wrote:
 How must I adjust Dovecot for proxying all users from the Internet to
 the internal Exchange Mail Server?

Is this even a supported configuration? I've never heard of anyone doing
this.

Dovecot proxy is intended to act as a proxy between multiple *dovecot*
servers...

But, I'll be interested to hear Timos response, if this might actually
work...

-- 

Best regards,

Charles


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Vitaliy Vladimirovich

  
--- Original Message ---  
From: Charles Marcus cmar...@media-brokers.com  
To: Vitaliy Vladimirovich artem...@ukr.net  
Date: 2 october, 15:20:18  
Subject: Re: [Dovecot] IMAP proxying for ALL users to internal mail server  
  
  On 10/2/2009 8:14 AM, Vitaliy Vladimirovich wrote:  
 How must I adjust Dovecot for proxying all users from the Internet to  
 the internal Exchange Mail Server?  
  
Is this even a supported configuration? I've never heard of anyone doing  
this.
   Why not?  
    
   From dovecot WIKI:  
  
The destination servers don't need to be running Dovecot, but you should make 
sure that the Dovecot proxy doesn't advertise more capabilities than the 
destination server can handle. For IMAP you can do this by changing   
imap_capability setting. For POP3 you'll have to modify Dovecot's sources for 
now (  src/pop3/capability.h). v1.2.rc4+ automatically sends updated untagged 
CAPABILITY reply if it detects that the remote server has different 
capabilities than what it already advertised to the client. Note that some 
clients simply ignore the updated CAPABILITY reply.  
  
   
  Dovecot proxy is intended to act as a proxy between multiple *dovecot*  
servers...  
  
But, I'll be interested to hear Timos response, if this might actually  
work...  
  
--  
  
Best regards,  
  
Charles  
  


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Timo Sirainen

On Oct 2, 2009, at 8:14 AM, Vitaliy Vladimirovich wrote:

   How must I adjust Dovecot for proxying all users from the  
Internet to the internal Exchange Mail Server?


To only a single Exchange server? Why would you need Dovecot proxy at  
all there? Just use whatever dummy TCP proxy.




Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Vitaliy Vladimirovich

  
--- Original Message ---  
From: Timo Sirainen t...@iki.fi  
To: Vitaliy Vladimirovich artem...@ukr.net  
Date: 2 october, 15:25:19  
Subject: Re: [Dovecot] IMAP proxying for ALL users to internal mail server  
  
  On Oct 2, 2009, at 8:14 AM, Vitaliy Vladimirovich wrote:  
  
 How must I adjust Dovecot for proxying all users from the  
 Internet to the internal Exchange Mail Server?  
  
To only a single Exchange server? Why would you need Dovecot proxy at  
all there? Just use whatever dummy TCP proxy.
  Yes, to only single.  
  I am trying to configure SMTP AUTH (Postfix+Dovecot SAS with Active Directory 
users account) and IMAP proxying to Exchange.  
So now my problem is in IMAP proxying.  
SMTP auth separately works fine.  
  
  
  
   


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Timo Sirainen

On Oct 2, 2009, at 8:39 AM, Vitaliy Vladimirovich wrote:


How must I adjust Dovecot for proxying all users from the
Internet to the internal Exchange Mail Server?


To only a single Exchange server? Why would you need Dovecot proxy at
all there? Just use whatever dummy TCP proxy.
  Yes, to only single.
  I am trying to configure SMTP AUTH (Postfix+Dovecot SAS with  
Active Directory users account) and IMAP proxying to Exchange.

So now my problem is in IMAP proxying.
SMTP auth separately works fine.


That still doesn't answer my question. It doesn't sound like you need  
IMAP proxying. It sounds like you just need TCP connection forwarding.


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Charles Marcus
On 10/2/2009, Vitaliy Vladimirovich (artem...@ukr.net) wrote:
 Is this even a supported configuration? I've never heard of anyone doing  
 this.

 Why not? From dovecot WIKI:  
   
 The destination servers don't need to be running Dovecot,

I stand corrected... I've never used the proxy feature, so had never
read the wiki on it...

Good to know though... thx...

-- 

Best regards,

Charles


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Vitaliy Vladimirovich

  
--- Original Message ---  
From: Timo Sirainen t...@iki.fi  
To: Vitaliy Vladimirovich artem...@ukr.net  
Date: 2 october, 15:42:40  
Subject: Re: [Dovecot] IMAP proxying for ALL users to internal mail server  
  
  On Oct 2, 2009, at 8:39 AM, Vitaliy Vladimirovich wrote:  
  
 How must I adjust Dovecot for proxying all users from the  
 Internet to the internal Exchange Mail Server?  
  
 To only a single Exchange server? Why would you need Dovecot proxy at  
 all there? Just use whatever dummy TCP proxy.  
 Yes, to only single.  
 I am trying to configure SMTP AUTH (Postfix+Dovecot SAS with  
 Active Directory users account) and IMAP proxying to Exchange.  
 So now my problem is in IMAP proxying.  
 SMTP auth separately works fine.  
  
That still doesn't answer my question. It doesn't sound like you need  
IMAP proxying. It sounds like you just need TCP connection forwarding.
  
          Your true. TCP connection forwarding I can do fith PF, but I think 
IMAP proxying more secure.  
  


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Eric Jon Rostetter

Quoting Timo Sirainen t...@iki.fi:

So if you really want Dovecot to be there, you need to use either  
SQL (e.g. SQLite) or checkpassword passdb. Others can't just accept  
all users without explicitly listing all of them. With SQL you could  
do something like:


Why not ldap authentication off the MS AD?

--
Eric Rostetter
The Department of Physics
The University of Texas at Austin

This message is provided AS IS without warranty of any kind,
either expressed or implied.  Use this message at your own risk.


Re: [Dovecot] IMAP proxying for ALL users to internal mail server

2009-10-02 Thread Timo Sirainen

On Oct 2, 2009, at 11:11 AM, Eric Jon Rostetter wrote:


Quoting Timo Sirainen t...@iki.fi:

So if you really want Dovecot to be there, you need to use either  
SQL (e.g. SQLite) or checkpassword passdb. Others can't just accept  
all users without explicitly listing all of them. With SQL you  
could do something like:


Why not ldap authentication off the MS AD?


I guess that'd work too if proxy has access to AD.