Re: Login attack on cyrus imap
I found out that it was a single IP from the log files. That person (or bot) logs into the POP3 server and tries to authenticate itself. The problem is that it logs in as a different user each time and does ALOT of these logins per second, causing LDAP to overload with connections. Is there any way to limit the number of connections in the cyrus server using some config parameter? Thanks. __ Check out the New Yahoo! Mail - Fire up a more powerful email and get things done faster. (http://advision.webevents.yahoo.com/mailbeta) Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
On Thu, 2006-11-02 at 22:33 +0100, Marten Lehmann wrote:
> Hello,
>
> > There will also be an entry in your cyrus.conf, EVENTS section, which is
> > starting these processes.
>
> I cannot see such an entry in cyrus.conf:
>
> EVENTS {
># this is required
>checkpointcmd="ctl_cyrusdb -c" period=30
>
># this is only necessary if using duplicate delivery suppression,
># Sieve or NNTP
>delprune cmd="cyr_expire -E 2" at=0400
>
># this is only necessary if caching TLS sessions
>tlsprune cmd="tls_prune" at=0400
> }
>
> Does this index all messages in the mailboxes automatically (we have
> more than 13.000 mailboxes) or just the first time a SEARCH is requested?
rather than use Red Hat's packages, I use Simon's packages for a number
of extras, though I'm certain that Red Hat's packages are based upon one
of Simon's older packages...and anyway, mine contains...
# index mails for searching
squat cmd="squatter -r user" at=0300
Simon's packages can be found here...
http://www.invoca.ch/pub/packages/cyrus-imapd/
Craig
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Login attack on cyrus imap
Jim John wrote: > We would like to know if there is a way to prevent these types of attacks? Take a look at fail2ban [1] Ben [1] http://fail2ban.sourceforge.net/ Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Login attack on cyrus imap
On Friday 03 November 2006 07:53, Jim John wrote: > Hi all. Our cyrus was hit by a "denial of service" > type attack. Basically, they kept trying to login as > different users per second. They didn't crash the > server, but they did crash our LDAP which is what we > used for authentication. We would like to know if > there is a way to prevent these types of attacks? We > use PLAIN LOGIN and Cyrus SASL for authentication. My firewall protects against these sort of things - I use PF and it has a feature where it can add an IP to a table if it attempts to connect more often than you specify. I have a script which removes old entries from the table - it is also very effective at stopping SSH brute force attempts (which is why I added it in the first place) -- Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C pgpLejqJaKvGX.pgp Description: PGP signature Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
Hello, Decrease your logging level from debug to info where do I change it? It seems that this is the default level in Redhat Enterprise Linux 4. Regards Marten Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
Hello,
There will also be an entry in your cyrus.conf, EVENTS section, which is
starting these processes.
I cannot see such an entry in cyrus.conf:
EVENTS {
# this is required
checkpointcmd="ctl_cyrusdb -c" period=30
# this is only necessary if using duplicate delivery suppression,
# Sieve or NNTP
delprune cmd="cyr_expire -E 2" at=0400
# this is only necessary if caching TLS sessions
tlsprune cmd="tls_prune" at=0400
}
Does this index all messages in the mailboxes automatically (we have
more than 13.000 mailboxes) or just the first time a SEARCH is requested?
Regards
Marten
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Login attack on cyrus imap
Hi all. Our cyrus was hit by a "denial of service" type attack. Basically, they kept trying to login as different users per second. They didn't crash the server, but they did crash our LDAP which is what we used for authentication. We would like to know if there is a way to prevent these types of attacks? We use PLAIN LOGIN and Cyrus SASL for authentication. Want to start your own business? Learn how on Yahoo! Small Business (http://smallbusiness.yahoo.com) Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: recursive reconstruct does not work?
Ken? Sorry to be pushy, but this is a fairly major bug. Jo Rhett wrote: One user with submailboxes. The submailboxes aren't reconstructed unless you manually specify them. Look at the thread here... http://lists.andrew.cmu.edu/pipermail/info-cyrus/2006-October/023818.html Ken Murchison wrote: Recursive reconstruct should and does work AFAIK. Are you trying to reconstruct an entire domain, multiple domains, or ... ? On Oct 12, 2006, at 12:04 PM, Jo Rhett wrote: Ken, any news on this? I could swear we talked about this a few years ago. Sorry for the absence, got bought out and stuck with old mobx UW-IMAP for a few years :-( Andreas Winkelmann wrote: Am Wednesday 04 October 2006 00:15 schrieb Jo Rhett: Maybe you should give us some more information about your setup? Nothing special. Virtdomains with unixhiersep, altnamespace and authentication via sasl auxprop-sql (mysql) out of the box FreeBSD ports. And show a list of these Mailboxnames with cyradm. Sure. Here's the mailboxes and the ktrace of a reconstruct of this mailbox (me) localhost> lm user/[EMAIL PROTECTED] user/jrhett/AT&[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/American [EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/lists/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/lists/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/lists/[EMAIL PROTECTED] (\HasNoChildren) user/jrhett/[EMAIL PROTECTED] (\HasChildren) user/[EMAIL PROTECTED] (\HasChildren) Yes, seems to be a Problem with virtdomains enabled. Maybe Ken can say something more. -- Jo Rhett Senior Network Engineer Network Consonance -- Jo Rhett Network/Software Engineer Net Consonance Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: japanese headers getting corrupted
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Ram, Ramprasad schrieb: > I have cyrus-imapd-2.2.3 on FC1 > > When mail is delivered from postfix to cyrus , via unix lmtp some mails > with japanese characters in headers ( from: and Subject: ) get changed > > The headers get replaced with "XX" ( non-ascii chars become X ) > but the body is not changed at all The problem here is the sending mail user agent. It does not generate mail headers according to RFC 2882 and RFC 2047. According to RFC 2822 message header lines must contain only ASCII characters (sect. 2.2). If a message header line has to transport any non ASCII characters they MUST be encoded as defined in RFC 2047. You should send the authors of the senders MUA a friendly mail pointing out that their piece of crap they call mail client is broken and it would be a smaller PITA if they would implement a mail standard that is around for now 10 years. > Do I have to do any setting to allow japanese characters ? You can set munge8bit: 0 reject8bit: 0 in imapd.conf Bye Goetz - -- DMCA: The greed of the few outweighs the freedom of the many -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFSjp62iGqZUF3qPYRAmLCAJ9OP9geI+sRKri3snb4jUoaC5CO/QCdFhMl uBnZVKVOGt/u2xt/aUCqmAc= =RTyt -END PGP SIGNATURE- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
NFSv4, anyone?
Has anyone evaluated the new "fixed" locking in NFSv4 for use with Cyrus? I attended a talk by Sun's Spencer Shepler at USENIX '05 in which he spent a good deal of time on NFSv4 (supposedly) fixes the locking shortcomings and can be used as a native file system. http://blogs.sun.com/shepler/date/20050407 Just curious if anyone has taken it for a drive with Cyrus? Thanks, -- Andrew Laurence [EMAIL PROTECTED] Central Computing Serviceshttp://www.nacs.uci.edu/~atlauren/ Network & Academic Computing Svcs. University of California, Irvine Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
On 02/11/06, Phil Chambers <[EMAIL PROTECTED]> wrote: On Thu, 2 Nov 2006 15:30:53 +0100 Phil Pennock< [EMAIL PROTECTED]> wrote:> On 2006-11-02 at 15:08 +0100, Marten Lehmann wrote:> > what is "SQUAT"? I have several lines like this in my logfile:>> "man -k squat" or "apropos squat" should point you to: > squatter(8) - create SQUAT indexes for mailboxes>> That man-page explains how squatter provides indexes of mail content for> speeding up IMAP SEARCH and shows you how to use it. >> There will also be an entry in your cyrus.conf, EVENTS section, which is> starting these processes.>I do not use squat and do not have squatter in my cyrus.conf file but get thesemessages all the time. So, they are not produced by squatter running. In my logs they are being generated by imapd. Given that they are to helpsearches I am baffled. There are typically 170,000 to 200,000 instances of'SQUAT failed to open index file' in my log each day and I can't believe that our users do that many searches!Phil. Probably not, but they probably do open an IMAP session that number of times and it is when they do attempt to open the SQUAT file the error message occurs. So you don't need to be running squatter for the messages to appear, in fact they only appear when squatter isn't running. Once the index files exist then you'll get a message like Nov 1 09:59:01 hostname imapd[1920]: SQUAT returned 120 messages instead.Keith-- Keith BrazingtonQuetz Limited Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
On Thu, 2 Nov 2006 15:30:53 +0100 Phil Pennock <[EMAIL PROTECTED]> wrote: > On 2006-11-02 at 15:08 +0100, Marten Lehmann wrote: > > what is "SQUAT"? I have several lines like this in my logfile: > > "man -k squat" or "apropos squat" should point you to: > squatter(8) - create SQUAT indexes for mailboxes > > That man-page explains how squatter provides indexes of mail content for > speeding up IMAP SEARCH and shows you how to use it. > > There will also be an entry in your cyrus.conf, EVENTS section, which is > starting these processes. > I do not use squat and do not have squatter in my cyrus.conf file but get these messages all the time. So, they are not produced by squatter running. In my logs they are being generated by imapd. Given that they are to help searches I am baffled. There are typically 170,000 to 200,000 instances of 'SQUAT failed to open index file' in my log each day and I can't believe that our users do that many searches! Phil. --- Phil Chambers ([EMAIL PROTECTED]) University of Exeter Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: japanese headers getting corrupted
On Thu, 2 Nov 2006, Ramprasad wrote: I have cyrus-imapd-2.2.3 on FC1 When mail is delivered from postfix to cyrus , via unix lmtp some mails with japanese characters in headers ( from: and Subject: ) get changed The headers get replaced with "XX" ( non-ascii chars become X ) but the body is not changed at all something like this Reply-To: "XXXc X^XX" <[EMAIL PROTECTED]> From: "XXXc X^XX" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: XX Do I have to do any setting to allow japanese characters ? It's a feature, not a bug! :) From the imapd.conf manpage: reject8bit: 0 If enabled, lmtpd rejects messages with 8-bit characters in the headers. Otherwise, 8-bit characters are changed to `X'. (A proper soultion to non-ASCII characters in headers is offered by RFC 2047 and its predecessors.) There has been a lot of discussion on the mailing list about this topic. Andy Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: japanese headers getting corrupted
Check the actual mail spool files. Chances are it's not Cyrus but your mail client. Most windows machines don't have the required fonts to render Japanese. --On November 2, 2006 8:40:59 PM +0530 Ramprasad <[EMAIL PROTECTED]> wrote: I have cyrus-imapd-2.2.3 on FC1 When mail is delivered from postfix to cyrus , via unix lmtp some mails with japanese characters in headers ( from: and Subject: ) get changed The headers get replaced with "XX" ( non-ascii chars become X ) but the body is not changed at all something like this Reply-To: "XXXc X^XX" <[EMAIL PROTECTED]> From: "XXXc X^XX" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: XX Do I have to do any setting to allow japanese characters ? Thanks Ram Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
japanese headers getting corrupted
I have cyrus-imapd-2.2.3 on FC1 When mail is delivered from postfix to cyrus , via unix lmtp some mails with japanese characters in headers ( from: and Subject: ) get changed The headers get replaced with "XX" ( non-ascii chars become X ) but the body is not changed at all something like this Reply-To: "XXXc X^XX" <[EMAIL PROTECTED]> From: "XXXc X^XX" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: XX Do I have to do any setting to allow japanese characters ? Thanks Ram Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
> what is "SQUAT"? I have several lines like this in my logfile: > Nov 2 15:03:39 vm27 imap[14376]: SQUAT failed to open index file > Nov 2 15:03:41 vm27 imap[14376]: SQUAT failed > And for some reason there has been a process that repeated these lines > at least 30 times. Decrease your logging level from debug to info Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: SQUAT failed
On 2006-11-02 at 15:08 +0100, Marten Lehmann wrote: > what is "SQUAT"? I have several lines like this in my logfile: "man -k squat" or "apropos squat" should point you to: squatter(8) - create SQUAT indexes for mailboxes That man-page explains how squatter provides indexes of mail content for speeding up IMAP SEARCH and shows you how to use it. There will also be an entry in your cyrus.conf, EVENTS section, which is starting these processes. Regards, -- "Everything has three factors: politics, money, and the right way to do it. In that order." -- Gary Donahue Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
RE: Cyrus IMAP / Outlook Problem
Hello, Thanks for all the info / replies. Sorry for the multiple emails, I had gotten a returned / bounced mail so I had resent it 2x, my apologies. There is a firewall between the client and the mail server so I will look at what you were saying in regards to how our tunnel is setup between the 2 firewalls. The other solutions that were stated were directed at configuration settings on the outlook client like ssl settings, and mail the time out seetings on the client. I just started with this company, and I am having to figure out things as I go along, so unfortunately I don't have all the information at my fingertips immediately. I was going to load a different mail client to see if the issues were specific to outlook, which it appears to be since both of the people having the issues are outlook clients, but they at the same time have the largest files too! Anyway, I will test the information given, and will post my findings shortly. Thanks again! Regards, Corey M. Bobb Network Administrator 901 International Parkway Lake Mary, FL 32746 D: 321.206.1911 M: 407.375.9185 F: 407.333.7701 [EMAIL PROTECTED] www.cygnus.com This communication is confidential, intended only for the named recipient(s) above and may contain trade secrets or other information that is exempt from disclosure under applicable law. Any use, dissemination, distribution or copying of this communication by anyone other than the named recipient(s) is strictly prohibited. If you have received this communication -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ciprian Marius Vizitiu Sent: Thursday, November 02, 2006 8:52 AM To: info-cyrus@lists.andrew.cmu.edu Subject: RE: Cyrus IMAP / Outlook Problem Good Afternoon All, I keep getting the following error from and outlook 2003 client [...] The server did not respond to this IMAP command before the connection was terminated. [...] Any help or a pointer in the right direction would be greatly welcomed. Random thoughts: Is it always the SAME client or is it that ALL your clients in LAN exhibit the same problem? If it's only one machine then I for one 'll start checking the wires; How's your switch's console report anything strange for that particular port? I know the combo Outlook/Cyrus to be particularly sensitive to wire errors where a browser might do away apparently well. If ALL your Outlook clients are exhibiting the problem... How about a Thunderbird just for testing? Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
SQUAT failed
Hello, what is "SQUAT"? I have several lines like this in my logfile: Nov 2 15:03:39 vm27 imap[14376]: SQUAT failed to open index file Nov 2 15:03:41 vm27 imap[14376]: SQUAT failed And for some reason there has been a process that repeated these lines at least 30 times. Regards Marten Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus IMAP / Outlook Problem
On 2006-11-02 at 08:04 -0500, cbobb wrote: > I keep getting the following error from and outlook 2003 client when the > user is trying to view or look at emails either with or without file > attachments. It is not all messages just particular ones, usually with a > file attachment: > > The server did not respond to this IMAP command before the connection was > terminated. Sounds like your network connection is fine until you try to max out the packet-size with large data transfers. Which smells like a Path MTU Discovery problem. Do you have a firewall inbetween the IMAP server and the IMAP clients? Is it possibly dropping fragmented packets, or stripping out all ICMP errors? You need ICMP "fragmentation needed and DF set", so that Path MTU Discovery can function. If you don't have control over the firewalls, then you can band-aid around it by reducing the MTU configured on the relevant network interface on the IMAP server. That in no way fixes the problem, but it might be just enough to bypass it and provide evidence that the firewalls are broken, to get a longer-term proper fix. Regards, -- "Everything has three factors: politics, money, and the right way to do it. In that order." -- Gary Donahue Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
RE: Cyrus IMAP / Outlook Problem
Good Afternoon All, I keep getting the following error from and outlook 2003 client [...] The server did not respond to this IMAP command before the connection was terminated. [...] Any help or a pointer in the right direction would be greatly welcomed. Random thoughts: Is it always the SAME client or is it that ALL your clients in LAN exhibit the same problem? If it's only one machine then I for one 'll start checking the wires; How's your switch's console report anything strange for that particular port? I know the combo Outlook/Cyrus to be particularly sensitive to wire errors where a browser might do away apparently well. If ALL your Outlook clients are exhibiting the problem... How about a Thunderbird just for testing? Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus IMAP / Outlook Problem
Hi, normaly it is enougth to write one eMail to the list. Quoting cbobb <[EMAIL PROTECTED]>: Good Afternoon All, I keep getting the following error from and outlook 2003 client when the user is trying to view or look at emails either with or without file attachments. It is not all messages just particular ones, usually with a file attachment: The server did not respond to this IMAP command before the connection was terminated. this sounds like a Outlook timeout message. But I don't know why he gets the timeout. Which version of Cyrus do you have? Can you reproduce this error with one eMail? Are ther any error messages in the cyrus logs? What happens when you read the eMail with an other client. After researching that message, the solutions that others had stated were tried had no effect on the client. Who has stated which solutions? Has anyone else seen this and if so, what were then necessary actions to correct this error when messages are trying to be retrieved. Is this error particular to Cyrus, is it coming from Outlooks, it sounds like a time out message, but if it is timing out . . . where in the process is it occurring? Michael Menge M.Menge Tel.: (49) 7071/29-70316 Universitaet Tuebingen Fax.: (49) 7071/29-5912 Zentrum fuer Datenverarbeitung mail: [EMAIL PROTECTED] Waechterstrasse 76 72074 Tuebingen smime.p7s Description: S/MIME krytographische Unterschrift Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cyrus IMAP / Outlook Problem
Good Afternoon All, I keep getting the following error from and outlook 2003 client when the user is trying to view or look at emails either with or without file attachments. It is not all messages just particular ones, usually with a file attachment: The server did not respond to this IMAP command before the connection was terminated. After researching that message, the solutions that others had stated were tried had no effect on the client. Has anyone else seen this and if so, what were then necessary actions to correct this error when messages are trying to be retrieved. Is this error particular to Cyrus, is it coming from Outlooks, it sounds like a time out message, but if it is timing out . . . where in the process is it occurring? Any help or a pointer in the right direction would be greatly welcomed. Thanks. Regards, Corey M. Bobb Network Administrator 901 International Parkway Lake Mary, FL 32746 D: 321.206.1911 M: 407.375.9185 F: 407.333.7701 [EMAIL PROTECTED] www.cygnus.com This communication is confidential, intended only for the named recipient(s) above and may contain trade secrets or other information that is exempt from disclosure under applicable law. Any use, dissemination, distribution or copying of this communication by anyone other than the named recipient(s) is strictly prohibited. If you have received this communication Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus, clusters, GFS - HA yet again
On Wed, Nov 01, 2006 at 05:03:43PM -0500, Scott Adkins wrote: > >And that's precisely what I'm trying to find out: since there are people > >that have succeeded in running Cyrus in an enviroment that's essentially > >the same as mine, I'd like to know how they have found their way around > >the DB error and other obstacles mentioned on this list in earlier > >posts. [...] > I can say that I solved the above problem by dumping BerkeleyDB. :) Even > though it is not recommended to use (at least the last time I remember > the recommendation to be) Skiplist for mailboxes.db, that is exactly what > I use. The performance hit for using Skiplist is negligible to the amount > of problems I saw when using various versions of BerleleyDB on Tru64. I > don't necessarily believe it is BerkeleyDB that is fully the problem, but > maybe BerkeleyDB's interaction with Tru64 that is the problem. > > In any case, I have been MUCH happier dumping BerkeleyDB across the board. Thanks a lot. I ended up recompiling Cyrus without-bdb, and got rid of the error. Weird, though: (see below) > # Database Formats > annotation_db: skiplist > duplicate_db: skiplist > mboxlist_db: skiplist > ptscache_db: skiplist > quota_db: quotalegacy > seenstate_db: skiplist > subscriptions_db: flat > tlscache_db: skiplist ...ok, I had in fact forgot to explicitely set tlscache_db to skiplist, and it does default to bdb-nosync. But - when I tried to run Cyrus again with "tlscache_db: skiplist" (and all old databases purged) I still got the DB ERROR. I tried hunting around the db4 code for a while, but couldn't get a lot out of it; would require a longer while. Getting completely rid of BDB does the job. Weird. > However, turning off duplicate suppression breaks sieve, so I had to > modify the code to allow sieve to continue using the duplicate_db, > even when duplicate suppression has been turned off. So, we still > use the database a little bit, but that is it... Which, makes skiplist > just fine for that. And it all works? Nice. > Anyways, if there are any questions you have about our environment, feel > free to e-mail off-list and ask me. I will do my best to help. As I > eluded to above, we are a Tru64 show and their CFS has worked wonders > for us. We have an e-mail project under way that will migrate Cyrus off > Tru64 into Linux (RedHat) with Polyserve as the cluster filesystem. We > have Polyserve purchased but not deployed. I will be happy to share our > deployment document once we have completed the project (which is likely > at least in the next summer timeframe). I read the article about CASPUR and PolyServe, and its performance was impressive. On the other hand, the email service here is abt an order of magnitude smaller than in the Italian project, so I thought GFS would be up to the job. But it's nice to know about commercial alternatives, if GFS doesn't work out after all. --Janne Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cyrus 2.1.12 Murder: Frontend/Backend on same Host?
Hi, Is it possible to run the Cyrus murder frontend and backend on the same host? The intention for this construct is: We have two locations in different countries, connected with VPN. I would like to have one Cyrus frontend/backend on each location and move the user mailboxes to that locations where they are working. Some users are moving from one location to another so I would like to give a transparent view to the shared folders. We don't want to use four mailservers for this purpose. One approach is to use Solaris 10 zones but I wonder if this is possible with one server and if someone is really using such a construct. Thanks in advance, Regards, Bernd Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
