Re: [Dovecot] stopping dictionary attacks (pop3)

2013-09-02 Thread Noel
On 9/2/2013 8:59 PM, ot...@ahhyes.net wrote: > Hi Guys, > > I was really hoping a couple of years later this would be > addressed... I'm running Dovecot 2.2.5 on FreeBSD. > > Is there anyway to limit the number of auth attempts allowed in a > single session? The reason for this is because I have "f

Re: [Dovecot] setup of dovecot as proxy to dbmail

2013-09-02 Thread Reindl Harald
Am 03.09.2013 04:22, schrieb Regan Yelcich: > Can anyone point me in the direction of a detailed how-to for setting up a > postfix and dovecot (proxy) node with dbmail? > > In particular I'm looking for a how-to which shows dovecot authenticating > against the dbmail database directly. > > Th

[Dovecot] setup of dovecot as proxy to dbmail

2013-09-02 Thread Regan Yelcich
Can anyone point me in the direction of a detailed how-to for setting up a postfix and dovecot (proxy) node with dbmail? In particular I'm looking for a how-to which shows dovecot authenticating against the dbmail database directly. The only example I've found is this one which requires a dupli

[Dovecot] stopping dictionary attacks (pop3)

2013-09-02 Thread other
Hi Guys, I was really hoping a couple of years later this would be addressed... I'm running Dovecot 2.2.5 on FreeBSD. Is there anyway to limit the number of auth attempts allowed in a single session? The reason for this is because I have "fail2ban" setup to firewall out any IP addresses that

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-02 Thread Noel
On 9/2/2013 8:35 AM, Charles Marcus wrote: > 2. A blacklist that when triggered (x failed login attempts in x > seconds), doesn't try to block the IP, but rather prevents login > attempts for that user account from even reaching the AUTH stage - > *unless* the IP in question is in the whitelist. >

Re: [Dovecot] Auth error in log

2013-09-02 Thread LuKreme
On 02 Sep 2013, at 07:40 , Per-Henrik Lundblom wrote: >> When a virtual user defined in the MySQL database tries to log in using >> IMAP or SMTP I always get auth failures logged in the system logs. >> Entries are like this: >> >> Aug 21 06:25:36 roadrunner dovecot-auth: pam_unix(dovecot:auth): >

Re: [Dovecot] local AND virtual mail locations ?

2013-09-02 Thread Pierre-Philipp Braun
Well, first of all, why are you using mbox? truncated output from my doeveconf -n # for Local users mail_location = maildir:~/Maildir For SQL users userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u driver = sql }

Re: [Dovecot] migration from IMAP/POP3 courier server to a remote dovecot server

2013-09-02 Thread nik600
Ok, it seems i found the problem, i was missing the plugin declaration into dovecot.conf imapc_host = mail.foo.com imapc_features = rfc822.size pop3c_host = mail.foo.com namespace { separator = / inbox = yes } protocol doveadm { mail_plugins = $mail_plugins pop3_migration } disable_plaint

Re: [Dovecot] Getting back into Dovecot 2.2.5

2013-09-02 Thread Charles Marcus
On 2013-09-01 7:37 PM, Andreas Kasenides wrote: On 31-08-2013 13:07, Kai Hendry wrote: However I found /usr/share/doc/dovecot/example-config/conf.d/ a little scary, since I like to have my configs as minimalistic as possible, e.g. I suggest you forget all the options and concentrate on the o

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-02 Thread Charles Marcus
On 2013-09-02 9:35 AM, Charles Marcus wrote: Well, it would be nice to have some way to stop brute force attacks (rather than just letting one run rampant until the attacker gives up) And I left out the obvious "... or worst case, is successful ..." - which obviously is why we are having this

Re: [Dovecot] Auth error in log

2013-09-02 Thread Per-Henrik Lundblom
Hi, > When a virtual user defined in the MySQL database tries to log in using > IMAP or SMTP I always get auth failures logged in the system logs. > Entries are like this: > > Aug 21 06:25:36 roadrunner dovecot-auth: pam_unix(dovecot:auth): > authentication failure; logname= uid=0 euid=0 tty=dove

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-02 Thread Charles Marcus
On 2013-09-02 4:12 AM, Stan Hoeppner wrote: As others have suggested this seems a log clutter issue, nothing more. Well, it would be nice to have some way to stop brute force attacks (rather than just letting one run rampant until the attacker gives up) - ie, attempted FAILED logins to the s

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-02 Thread Charles Marcus
On 2013-09-01 3:59 PM, Noel wrote: The objective of Stan's list is to reject dynamic hosts, because the overwhelming majority of dynamic hosts trying to send via SMTP are zombies. For dovecot, the situation is quite different. Blocking all dynamic IPs would be an obvious mistake. Oops... you'

Re: [Dovecot] migration from IMAP/POP3 courier server to a remote dovecot server

2013-09-02 Thread nik600
to give some more information, i've set pop3_uidl_format = UID%u-%v on the courier-side i get this UIDL answer: UIDL +OK 1 1378040847.Vfe11I12801312M172099.myserver.cloud923 2 UID2-1378040947 3 UID3-1378040947 4 UID4-1378040947 5 UID5-1378040947 on the dovecot-side i get this UIDL answer: UIDL

[Dovecot] migration from IMAP/POP3 courier server to a remote dovecot server

2013-09-02 Thread nik600
Dear all i'm planning a transparent migration from a courier server that provides both IMAP and POP3 access to users to a remote dovecot server with both IMAP and POP3 access. I have to migrate about 2500 users for 250 GB of space. I'm using dovecot 2.2.5.4 on debian6 squeeze. To make a transpa

Re: [Dovecot] Getting back into Dovecot 2.2.5

2013-09-02 Thread Andreas Kasenides
On 02-09-2013 07:04, Kai Hendry wrote: On Mon, Sep 02, 2013 at 02:37:04AM +0300, Andreas Kasenides wrote: IIUC Postfix places by default mail in /var/mail/%u as an mbox. sg:/etc/postfix$ sudo postconf | grep mail_spool mail_spool_directory = /var/mail I think the solution from looking around i

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-02 Thread Stan Hoeppner
On 9/1/2013 2:59 PM, Noel wrote: > On 9/1/2013 10:00 AM, Charles Marcus wrote: ... >> Wonder if there's a way to leverage Stan Hoeppner's most excellent >> botnet killer to reject AUTHs from the same types of clients >> before they even try? > > The objective of Stan's list is to reject dynamic hos