Re: [Dovecot] Encryption solution for messages at rest

2013-10-28 Thread Noel Butler
On 29/10/2013 03:19, Robert Schetterer wrote: https://perot.me/encrypt-specific-incoming-emails-using-dovecot-and-sieve I got worried, laughed, and stopped reading at: "not only do you not have to edit any Postfix configuration (which by itself is an exercise in patience)," As you kno

Re: [Dovecot] OT: PHP session data storage

2013-10-28 Thread Noel Butler
On 29/10/2013 10:10, Michael Orlitzky wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/28/2013 04:10 PM, Reindl Harald wrote: php_admin_value open_basedir /var/www/$domain/$host/ php_admin_value upload_tmp_dir /var/www/$domain/$host/tmp php_admin_value session.save_path /var/www/$dom

Re: [Dovecot] Strange output from LIST command

2013-10-25 Thread Noel Butler
On 25/10/2013 17:20, azurIt wrote: Od: Noel Butler Komu: Dátum: 25.10.2013 00:42 Predmet: Re: [Dovecot] Strange output from LIST command On 24/10/2013 23:48, azurIt wrote: How am i suppose to know that my report was even noticed by any developer? azur http://dictionary.reference.com

Re: [Dovecot] Strange output from LIST command

2013-10-24 Thread Noel Butler
On 24/10/2013 23:48, azurIt wrote: How am i suppose to know that my report was even noticed by any developer? azur http://dictionary.reference.com/browse/patience

Re: [Dovecot] Odd Feature Request - RBL blacklist lookup to prevent authentication

2013-10-22 Thread Noel Butler
On 23/10/2013 05:45, Rick Romero wrote: IMHO, the problem with all out blocks on auth is the same as doing an all out block based on SPF - so many IPs are shared you can easily get false positives. Blocks using SPF will not be FP's, they will be by your internal decision, so will be a g

Re: [Dovecot] fstat() errors on /srv/mail//dovecot.index.log

2013-10-22 Thread Noel Butler
:25 AM, Noel Butler wrote: On 17/10/2013 00:08, Zach La Celle wrote: Dovecot version 2.1.7 Ubuntu 12.04.3 LTS Kernel 3.2.0-35-generic x86_64 I'm not sure exactly when this started occurring, but sporatically users report issues receiving email, having email saved to "Sent,"

Re: [Dovecot] fstat() errors on /srv/mail//dovecot.index.log

2013-10-17 Thread Noel Butler
On 17/10/2013 00:08, Zach La Celle wrote: Dovecot version 2.1.7 Ubuntu 12.04.3 LTS Kernel 3.2.0-35-generic x86_64 I'm not sure exactly when this started occurring, but sporatically users report issues receiving email, having email saved to "Sent," etc. Looking in dovecot.log, I see the followi

Re: [Dovecot] POP3 Setup help - more info

2013-10-14 Thread Noel Butler
On 15/10/2013 02:58, /dev/rob0 wrote: In addition to the ignored replies in the other thread, I'll ask this: why do you want to use POP3? IMAP can do everything POP3 can do, and it's superior in many ways. POP3 should have died out a decade ago. Not sure what country he's in, but I'll comment

Re: [Dovecot] Transparent Migration from cyrus to dovecot

2013-10-12 Thread Noel Butler
On 12/10/2013 19:22, Daniel Parthey wrote: No mail will be lost, since it should remain in the remote MTA's mail queue for a while in order to be retried and delivered later. No guarantee there, some services are broken and do not retry, hotmail used to, and I've heard in some cases, still d

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Noel Butler
On 10/10/2013 13:36, Noel Butler wrote: I can't recall if we previously discussed it, but, why the fascination with imaps, why not use TLS on 143, or wont that connect either? tried pop3 TLS ? pop3s? and when you test, use -CAfile /path/to/(startssl's)CA.pem I see no auth mech sta

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Noel Butler
ited, IIRC, login is re auth_mechanisms = plain login On 10/10/2013 10:51, Dan Langille wrote: On Oct 9, 2013, at 6:33 PM, Noel Butler wrote: On 10/10/2013 06:09, Eliezer Croitoru wrote: I would imaging that 4k bits certificate handshake and validation can take more then 1 sec.. Am I righ

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Noel Butler
On 10/10/2013 06:09, Eliezer Croitoru wrote: I would imaging that 4k bits certificate handshake and validation can take more then 1 sec.. Am I right about it? hardly and the size is not his problem. he was given a test account on my network when I last saw this thread (few weeks back?), th

Re: [Dovecot] POP3 Setup help

2013-10-08 Thread Noel Butler
On 09/10/2013 03:40, Thomas I Higgins wrote: I am lost as to what I am missing. I am setting up dovecot 2.0.9 on a RHEL 6.4 machine as provided by my provider. I have IMAP up and running, and I have POP3 up and running. Testing confirms this. Also, if it makes a difference, I enabled doveco

Re: [Dovecot] Yet another going from 1.2 to 2.X question: authentication

2013-10-07 Thread Noel Butler
On 07/10/2013 14:17, Mauricio Tavares wrote: Makes sense, so I shall set them up as /etc/dovecot/conf.d/10-master.conf # http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL service auth { unix_listener auth-userdb { mode = 0600 user = virtual # Us

Re: [Dovecot] retr errors

2013-10-06 Thread Noel Butler
On 07/10/2013 11:19, Bill Morgan wrote: On 10/6/2013 5:58 PM, Daniel Parthey wrote: Hi Bill, any intercepting virus scanner or personal firewall software between your mail client and the dovecot server? Regards Daniel McAfee As I'm sure Daniel was implying, did you also test without

Re: [Dovecot] couple of errors on new setup

2013-10-06 Thread Noel Butler
On 07/10/2013 04:58, Timo Sirainen wrote: On 6.10.2013, at 4.04, Noel Butler wrote: mail_nfs_index = yes mail_nfs_storage = yes These are never recommended. They may be a kludgy workaround to avoid worst problems, but they will never work 100% In the recommended configurations (one Dovecot

Re: [Dovecot] couple of errors on new setup

2013-10-06 Thread Noel Butler
On 06/10/2013 03:16, Dean Guenther wrote: mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl mbox over NFS has *never* been recommended, it is unsafe - for any pop/imap type server, not just dovecot. If its not too late, and since yo

Re: [Dovecot] fail2ban

2013-10-04 Thread Noel Butler
On Fri, 2013-10-04 at 21:55 +0200, Gordon Grubert wrote: > > > > this is no problem of dovecot. Nevertheless, for analysis, you can use > fail2ban-regex when applying your filter to your logfile. > Kind of right, but the dovevcot wiki apparently contains wrong information, so I think its fai

Re: [Dovecot] fail2ban

2013-10-04 Thread Noel Butler
On Fri, 2013-10-04 at 15:47 +1000, Nick Edwards wrote: > For dovecot 2.1 > > as per wiki2, is this still valid? noticed a problem before and saw > it does seem to be triggering, I use: > looks out dated > filter.d/dovecot.conf That'll never work, you need to change > [Definition] > failrege

Re: [Dovecot] recipient_delimiter

2013-09-26 Thread Noel Butler
On Thu, 2013-09-26 at 17:24 -0600, LuKreme wrote: > On 26 Sep 2013, at 15:29 , voy...@sbt.net.au wrote: > > should I also enter $recipient_delimiter = ‘+’ in my > > /etc/dovecot/dovecot.conf ? > > > > what will it add to this working setup, what am I missing? > > Setting it will, as I understan

Re: [Dovecot] recipient_delimiter

2013-09-26 Thread Noel Butler
On Fri, 2013-09-27 at 07:29 +1000, voy...@sbt.net.au wrote: > > I have working dovecot 2.1.1 with postfix, only have virtual domains, all > users in mysql; > > '+' delimiter is enabled in postfix, and, works OK > > postfix]# grep _delimiter main.cf > # The recipient_delimiter parameter specifi

Re: [Dovecot] 2048-bit Diffie-Hellman parameters

2013-09-24 Thread Noel Butler
On Tue, 2013-09-24 at 14:04 +0200, lst_ho...@kwsoft.de wrote: > [OT] Why, they actually use the english TEMPORA to get the data, so at > least in part they don't sniff the wire... > Tempora, amongst others (remember tempora is pretty old now) signature.asc Description: This is a digital

Re: [Dovecot] 2048-bit Diffie-Hellman parameters

2013-09-24 Thread Noel Butler
On Tue, 2013-09-24 at 04:21 -0500, Stan Hoeppner wrote: > > NSA doesn't sniff the wire. They don't crack encryption. Neither are somebody hasnt been paying attention signature.asc Description: This is a digitally signed message part

Re: [Dovecot] LDA quota rejection

2013-09-21 Thread Noel Butler
Dovecot should never generate a message to send to sender, this is classified as backscatter. Your MTA should get the quota answer from dovecot when the sender connects, and tries to mail and fail then, it is the MTA (maillog file) you need to look at to see why your MTA is not tempfailing the conn

Re: [Dovecot] Yet another going from 1.2 to 2.X question: authentication

2013-09-18 Thread Noel Butler
On Thu, 2013-09-19 at 00:50 -0400, Mauricio Tavares wrote: > So in 1.2.9 I had something like this: > > [...] > > socket listen { > master { > path = /var/run/dovecot/auth-master > mode = 0600 > user = virtual # User running Dovecot LDA's d

Re: [Dovecot] SSL with startssl.com certificates

2013-09-17 Thread Noel Butler
On Tue, 2013-09-17 at 08:39 -0400, Dan Langille wrote: > > Since we just ruled this one out, might I suggest you grab the source > > and build it, install it all under /opt/dovecot that way it wont > > interfere with your ports installation and try that, the one you > > successfully just tested

Re: [Dovecot] SSL with startssl.com certificates

2013-09-16 Thread Noel Butler
On Mon, 2013-09-16 at 10:10 -0400, Dan Langille wrote: > On Sep 14, 2013, at 10:36 PM, Noel Butler wrote: > > > On Sat, 2013-09-14 at 15:21 -0400, Dan Langille wrote: > > > > > >>> > >> > >> Hmmm, I tried ssl = yes. Mail.app still cr

Re: [Dovecot] SSL with startssl.com certificates

2013-09-14 Thread Noel Butler
On Sat, 2013-09-14 at 15:21 -0400, Dan Langille wrote: > > > > Hmmm, I tried ssl = yes. Mail.app still crashes when trying to connect. > Well, its likely an Apple fault, after all their implementation of pop3 has been known to be broken for many many many years, but still after all these yea

Re: [Dovecot] SSL with startssl.com certificates

2013-09-13 Thread Noel Butler
On Fri, 2013-09-13 at 10:18 -0400, Dan Langille wrote: > Perhaps I am doing the chain incorrectly. I just tried again. The > server is now set up with the following: > > I have three certs in this chain file: > > cat imaps.unixathome.org.pem sub.class1.server.ca.pem ca.pem > > testing.chain

Re: [Dovecot] How to disable SSL and TLSv1.1?

2013-09-12 Thread Noel Butler
Hi Patrick, On Thu, 2013-09-12 at 09:23 +0200, Patrick Lists wrote: > Hi Noel, > > On 09/12/2013 08:54 AM, Noel Butler wrote: > [snip] > > I'm always of the belief that if one person wants a feature, they might > > be the only vocal person, but they are nev

Re: [Dovecot] Quota question.

2013-09-11 Thread Noel Butler
On Wed, 2013-09-11 at 15:05 -0400, Bruce Markey wrote: > I think it's something more. Apparently it's not even looking at the > database. Not sure what I didn't do. > If anyone can point me to a good dovecot / mysql quota how to that would > be helpful. > > Thank you > bruce > > signatur

Re: [Dovecot] How to disable SSL and TLSv1.1?

2013-09-11 Thread Noel Butler
On Wed, 2013-09-11 at 15:46 -0700, Darren Pilgrim wrote: > > on most widely used distributions you even have no openssl > > version supporting TLS 1.2 and so you lock them all out > > OpenSSL 1.0.1 supports TLS 1.2. So does Windows 7/8 and MacOS X. > Mozilla NSS 3.15 does 1.2. > > FWIW, I was a

Re: [Dovecot] SOLVED: dovecot-2.2.5 build failed if openssl < 0.9.8

2013-09-11 Thread Noel Butler
0.9.7? that was released in 2001 IIRC, and ceased being supported in 2005, that's 8 years ago, are you really suggesting dovecot be patched to process something that's so old, you likely have far more problems, of a security nature that is. On Thu, 2013-09-12 at 07:45 +0200, Andreas Schulze wrote:

Re: [Dovecot] stopping dictionary attacks (pop3)

2013-09-04 Thread Noel
users. > Operators of shared hosting servers certainly wont have that luxury. On my personal sever I use http://www.ipdeny.com/ cidr blocks to only allow the countries where users are expected to be. Obviously not a solution for an ISP... -- Noel Jones

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-03 Thread Noel
On 9/3/2013 5:12 AM, Charles Marcus wrote: > > Ummm... maybe you didn't read what I wrote? That is what I meant > by 'whitelist' in item 1... ;) > Yes, I think we're on the same page. > > On 2013-09-02 9:59 PM, ot...@ahhyes.net wrote: >> Is there anyway to limit the number of auth attempts allow

Re: [Dovecot] stopping dictionary attacks (pop3)

2013-09-02 Thread Noel
ecret is the "pfctl -k IP" command to drop state for the offending IP. Just add it to your fail2ban action command. action = /sbin/pfctl {whatever you have now} && /sbin/pfctl -k A nice writeup of fail2ban and pf can be found here: http://www.effu.se/2011/03/Integrating-PF-with-Fail2ban-0.9 -- Noel Jones

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-02 Thread Noel
failures during Y seconds, fail all future attempts for the account for T seconds. Maybe reset the timer on each attempt during the blackout period so the timer never expires on the persistent distributed brute force attacks. I suppose there would also need to be a way to whitelist IPs so the account owner can get in. -- Noel Jones

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets

2013-09-01 Thread Noel
> Stan? > The objective of Stan's list is to reject dynamic hosts, because the overwhelming majority of dynamic hosts trying to send via SMTP are zombies. For dovecot, the situation is quite different. Blocking all dynamic IPs would be an obvious mistake. -- Noel Jones

Re: [Dovecot] Disconnected (no auth attempts)

2013-08-12 Thread Noel
ettings in thunderbird, possibly the server->authentication method setting. -- Noel Jones

Re: [Dovecot] LDA vs. LMTP

2013-07-29 Thread Noel Butler
On Mon, 2013-07-29 at 09:30 +0200, Jan Behrend wrote: > You cannot use the LDA method if SMTP and IMAP services reside on > different machines, which would be the case in larger scale mail system > setups. > Sorry, that is incorrect. Granted, it does mean putting dovecot on the SMTP servers

Re: [Dovecot] dovecot: imap-login: Aborted login

2013-07-22 Thread Noel Butler
On Mon, 2013-07-22 at 18:30 -0700, Joseph Tam wrote: > Adnane writes: > > > but I cant send mails > > > > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics: max connection > > rate 1/60s for (smtp:209.85.220.177) at Jul 23 02:58:13 > > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics:

Re: [Dovecot] dovecot: imap-login: Aborted login

2013-07-22 Thread Noel Butler
On Tue, 2013-07-23 at 02:20 +0100, Adnane wrote: > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics: max connection > rate 1/60s for (smtp:209.85.220.177) at Jul 23 02:58:13 > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics: max connection > count 1 for (smtp:209.85.220.177) at Ju

Re: [Dovecot] trying to configre dovecot

2013-07-15 Thread Noel Butler
On Mon, 2013-07-15 at 17:58 +1000, Noel Butler wrote: > ssl_key_file = /etc/ssl/certs/mail.key Hrmm the forced html -to- text conversion of this list (I sometimes wonder if this is 1993 not 2013) seems to have stripped out the less than bracket preceding the filename, but the actual en

Re: [Dovecot] trying to configre dovecot

2013-07-15 Thread Noel Butler
On Sun, 2013-07-14 at 21:38 -0700, Professa Dementia wrote: > On 7/14/2013 9:03 PM, Gene Heskett wrote: > > > > Guessing between the lines I made a few substitutions to localize it for > > me, but when I run the line to dump the configs, the output is very short > > because I do not have the *.

Re: [Dovecot] Config for master user in dovecot 1.1.20

2013-06-22 Thread Noel Butler
/me lowers myself to harrys level coz he might understand it only harry needs to read my reply, no one else should as your ears may burn :) On Sat, 2013-06-22 at 04:12 +0200, Reindl Harald wrote: > > Am 22.06.2013 03:02, schrieb Nick Edwards: > > Save your breath, Harald is just a complete abra

Re: [Dovecot] from ISC: Exim/Dovecot exploit making the rounds

2013-06-09 Thread Noel Butler
Actually, it is an exploit against dovecot LDA, introduced, and caused by, exim. On Sun, 2013-06-09 at 09:58 +0200, Luigi Rosa wrote: > One of our readers wrote in to let us know that he had received an attempted > Exim/Dovecot exploit attempt against his email server. The exploit partially

Re: [Dovecot] Dovecot mysql replication

2013-05-30 Thread Noel Butler
On Thu, 2013-05-30 at 15:10 +0200, Robert Schetterer wrote: > Hi Harald, if you declare this broken, why not fix it yourself, instead > of barking to the moon, however the current behave should be written in > the wiki, to avoid recover the same questions on the list in periods > Question Rober

Re: [Dovecot] Dovecot mysql replication

2013-05-30 Thread Noel Butler
On Thu, 2013-05-30 at 07:01 -0400, Charles Marcus wrote: > On 2013-05-30 2:59 AM, Nick Edwards wrote: > > nobody makes us dovecot true, but dovecot works fine and in perfect > > harmony with postfix, except this one option. I remember the earlier > > thread and have been waiting for this option

Re: [Dovecot] Dovecot mysql replication

2013-05-30 Thread Noel Butler
On Thu, 2013-05-30 at 20:24 +0200, Robert Schetterer wrote: > > Well, I'd add that the config itself should complain (with a link to the > > wiki page explaining the issue) if more than one server is added. In > > other words, it should tell the admin that it will not work as they may > > be expec

Re: [Dovecot] Dovecot mysql replication

2013-05-29 Thread Noel Butler
gured to do it just as > well (whereas LB couldn't do actual load balancing for multiple sql servers, > because Dovecot uses long running TCP connections). > > On 29.5.2013, at 2.09, Noel Butler wrote: > > > But each additional link added to the chain, is one more poi

Re: [Dovecot] Dovecot mysql replication

2013-05-28 Thread Noel Butler
But each additional link added to the chain, is one more point of failure, unless he's replied to OP privately I'm amazed Timo has ignored this, since its been brought up from time to time before, if he no longer plans on doing it, he should just say so, so people can look at complete alternatives

Re: [Dovecot] Dovecot mysql replication

2013-05-24 Thread Noel Butler
On Fri, 2013-05-24 at 10:24 +0200, Reindl Harald wrote: > Am 24.05.2013 09:52, schrieb Edwardo Garcia: > > But mysql not problemo, it be Dovecot talk to both, do not want Dovecot to > > talk to both at same time unless slave (local) copy die > > and this mostly for a good resason to support your

Re: [Dovecot] Sieve was installed but doesn't work or log

2013-05-17 Thread Noel Butler
On Fri, 2013-05-17 at 10:47 -0400, Jim McNamara wrote: > Thank you for the solid suggestion, Noel! I now have Dovecot 2.2.1 along > with Pigeonhole 0.4.0. All is working well at present. The largest > issues I encountered was getting the configuration changed and > functional from

Re: [Dovecot] Sieve was installed but doesn't work or log

2013-05-14 Thread Noel Butler
On Tue, 2013-05-14 at 12:49 -0400, Jim McNamara wrote: > Hello everyone. > > I have dovecot version 1.2.8 installed from source. This morning I > installed the sieve plugin to sort emails, and though the install > reported no errors, the plugin doesn't seem to function, and no mention > of it

Re: [Dovecot] Looking for a good way to manage passwords for CRAM-MD5

2013-05-14 Thread Noel
wiki2.dovecot.org/SSL > > Quoting from the latter page: > > "Some admins want to require SSL/TLS, but don't realize that this is > also possible with STARTTLS (Dovecot has disable_plaintext_auth=yes > and ssl=required settings)." It's not unreasonable to disable the plaintext ports to minimize the possibility of a fat-fingered accident. -- Noel Jones

Re: [Dovecot] Any way to let dovecot block pop3 attempts?

2013-05-10 Thread Noel
retty easy to define a different action, such as the old fashioned but still effective null route the offending IP, or if you build dovecot with tcp wrapper support, Fail2Ban can add the IP to hosts.deny. Of course, you can block with null routes or hosts.deny manually, but better to let the computer do the work. -- Noel Jones

Re: [Dovecot] IMAP SSL proxy (questions)

2013-05-08 Thread Noel Butler
On Wed, 2013-05-08 at 20:57 +0100, Ben Morrow wrote: > > More importantly, it only works with clients (browsers) which are new > enough to send SNI. If you use, for instance, any version of IE on > Windows XP, it will not work. > Even old linux clients since 2006 (oldest copies of galeon and

Re: [Dovecot] Idea: POP3 deletion as a flag

2013-05-08 Thread Noel Butler
ble many auth functions like we could do in 1.x series). It's also like everything else with responsibility to running services, in each of our own countries, laws differ, we need to be aware of those laws (and of any country you host content in) with regards to what can or can not be done, either outright, or with provision (eg: clear statement of data retention in your T&C's or privacy policy etc). Cheers Noel <> signature.asc Description: This is a digitally signed message part

Re: [Dovecot] Permission problem with LDA and dovecot 2.2.1

2013-05-06 Thread Noel Butler
On Mon, 2013-05-06 at 20:24 +0200, Tobi wrote: > Hello list > > today I built dovecot 2.2.1 from sources. But I have permission problems > with LDA > The "normal" imap part works fine, users can login and see their boxes. > deliver is called as LDA from postfix master.cf as follows > << > doveco

Re: [Dovecot] Idea: POP3 deletion as a flag

2013-05-06 Thread Noel Butler
On Mon, 2013-05-06 at 11:45 -0700, Kelsey Cummings wrote: > > While I see the point you're trying to make, I don't think it is valid. > On our servers the deleted message could exist in filesystem snapshots, > disk->disk backups and on tape. That's what most people forget - until they ac

Re: [Dovecot] Idea: POP3 deletion as a flag

2013-05-06 Thread Noel Butler
On Mon, 2013-05-06 at 15:39 +0200, Axel Luttgens wrote: > Hmmm... > Let's consider the RFC's part related to, for example, the TOP command: > > If the POP3 server issues a positive response, then the > response given is multi-line. After the initial +OK, the > POP3 server sen

Re: [Dovecot] Pigeonhole for 2.2?

2013-05-06 Thread Noel Butler
On Mon, 2013-05-06 at 08:22 -0400, Dave Gattis wrote: > Maybe you should ask for a refund, or assist with the next version. > You do program, right? I am involved in several projects already, Timo wouldn't accept anything from me anyway :) <> signature.asc Description: This is a digitally si

Re: [Dovecot] Pigeonhole for 2.2?

2013-05-06 Thread Noel Butler
On Mon, 2013-05-06 at 11:00 +0200, Reindl Harald wrote: > > > > I 've kept messages from this list since its last clean-out, in 08, > > those message do not appear, it seems on jan 13, dovecots mail server > > had no PTR entry, seems 11 messages in total missing - not my problem > > stop this b

Re: [Dovecot] Pigeonhole for 2.2?

2013-05-06 Thread Noel Butler
On Mon, 2013-05-06 at 12:20 +1000, Reuben Farrelly wrote: > Examples: > > http://www.dovecot.org/list/dovecot/2013-January/140156.html > http://www.dovecot.org/list/dovecot/2012-January/062944.html > http://www.dovecot.org/list/dovecot/2010-August/051544.html > I 've kept messages from this l

Re: [Dovecot] Pigeonhole for 2.2?

2013-05-05 Thread Noel Butler
On Mon, 2013-05-06 at 10:56 +1000, Reuben Farrelly wrote: > On 6/05/2013 10:46 AM, Noel Butler wrote: > > The problem with dovecot is, Timo does not release rc's or beta's where > > this testing could show the bugs found and ironed out for a _real_ > > release this

Re: [Dovecot] Pigeonhole for 2.2?

2013-05-05 Thread Noel Butler
On Mon, 2013-05-06 at 02:31 +0200, Benny Pedersen wrote: > Reindl Harald skrev den 2013-05-06 02:11: > > > and who forces you jumping to 2.2 right now? > > missing good examples on maillist that it works > > > there is also 2.0 and 2.1 > 2.0 = abysmal 2.1 as of around 2.1.12-ish I deemed dove

Re: [Dovecot] Idea: POP3 deletion as a flag

2013-05-05 Thread Noel Butler
On Sat, 2013-05-04 at 05:29 -0700, Professa Dementia wrote: > On 5/3/2013 7:38 PM, Noel Butler wrote: > > > > > Incidentally, the last time I read the pop3 RFC, admittedly some decade > > or so ago (and yeah it's likely been updated since?) I can not recall >

Re: [Dovecot] dual stack issue

2013-05-04 Thread Noel Butler
On Sat, 2013-05-04 at 10:19 +0200, Forum wrote: > > But what is the meaning of the addional "*," now? > Listening specially to IPV4 and IPV6? > * has always meant ipv4 :: has always meant ipv6 signature.asc Description: This is a digitally signed message part

Re: [Dovecot] Dovecot Postfix Quota Policy Service

2013-05-04 Thread Noel Butler
On Sat, 2013-05-04 at 07:35 +0200, Robert Schetterer wrote: > du solltest nur Dovecot 2.2.1 verwenden > der quota code in 2.1 ist "nicht voellig vollstaendig" > das setup sieht auf den ersten Blick ok aus > The quota-grace I think was only bit not backported, is that right? Did Timo do or anno

Re: [Dovecot] Idea: POP3 deletion as a flag

2013-05-03 Thread Noel Butler
On Sat, 2013-05-04 at 00:06 +0200, Simon Brereton wrote: > > The EU laws not withstanding, I think this is a good thing. The world > didn't revolve around the EU anymore than it does the US. Actually you may be wrong there, Australia and IIRC New Zealand, seem to follow suite with the EU. and

Re: [Dovecot] Idea: POP3 deletion as a flag

2013-05-03 Thread Noel Butler
f code and manually having to add a single word to pop options is complex? I'm one for KISS, as those networks rarely, if EVER, have problems, since there is nothing to go wrong, but even I have no objections to such an option, despite never intending to use it. Cheers Noel signature.asc Description: This is a digitally signed message part

Re: [Dovecot] Dovecot Failover

2013-04-19 Thread Noel Butler
speaking of failover, recall about two years ago when I and (IIRC two others, forget who, dont have copy of messages anymore) asked about mysql failover (where it only talked to the second host when the first failed to respond - like postfix does) you mentioned it would go on your "to do list" for

Re: [Dovecot] listen directive changed?

2013-04-19 Thread Noel Butler
On Fri, 2013-04-19 at 01:56 +0300, Timo Sirainen wrote: > On 19.4.2013, at 1.53, Nick Edwards wrote: > > > So what is the point of the global? > > I commented out the address in inet_listener, assuming it then will > > use global, but no, cant connect at all then. > > If you comment out the add

Re: [Dovecot] Probs authenticating to Dovecot

2013-04-16 Thread Noel Butler
On Mon, 2013-04-15 at 23:38 -0700, Kris Magnusson wrote: > I will blow this VM away and start from scratch. Unless anyone has any > concrete suggestions I can implement before then that I can use to salvage a > day's worth of work. > If it comes down to it, I just asked on IRC for you if any

Re: [Dovecot] Probs authenticating to Dovecot

2013-04-16 Thread Noel Butler
On Mon, 2013-04-15 at 23:38 -0700, Kris Magnusson wrote: > > and introducing a DB into the mix just made things an order of magnitude more > complicated. I'd rather use OpenLDAP, since I can write JNDI code to figure > out what's going on with a directory and even add/modify/delete entries to/

Re: [Dovecot] Probs authenticating to Dovecot

2013-04-15 Thread Noel Butler
On Mon, 2013-04-15 at 21:43 -0700, Kris Magnusson wrote: > Hi folks. I have set up a Ubuntu 12.04 VM with Dovecot, Postfix, MySQL, > amavisd, and ISPConfig 3. > tatic IP. I followed the instructions at howtoforge.com to set up and > configure this Somebody else recently used some howto f

Re: [Dovecot] SSHA512 auth not working

2013-04-15 Thread Noel Butler
On Tue, 2013-04-16 at 03:54 +0200, Marcin Czupryniak wrote: > I'm trying to configure SSHA512 passwords and when testing discovered > that they were not working as expected. > At first i was using Centos 6.4 which doesn't have the glibc CRYPT > newest functions ($6$salt$pass) so had to rollback

Re: [Dovecot] Dovecot / Postfix

2013-04-12 Thread Noel
ions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination but what we really want to see (and what postfix-users will want to see) is how you integrated this into postfix, not a working config before changes. Did you maybe forget the "check_policy_service" keyword? -- Noel Jones

Re: [Dovecot] MOSTLY SOLVED: Re: client limit and STARTTLS

2013-04-08 Thread Noel Butler
On Sat, 2013-04-06 at 01:09 -0700, David Benfell wrote: > > Are your certificate chains valid? Simply saying "isn't working" is > > almost a requirement for a *sigh* > > log output please, or a better description than "isn't working" ;) > Yes, the certificate chains were screwed up. And you

Re: [Dovecot] password encryption

2013-04-06 Thread Noel Butler
On Fri, 2013-04-05 at 23:36 -0700, Jim Pazarena wrote: > I have just come to the realization that password encryption using the > crypt function in linux, ONLY USES THE FIRST 8 CHARS. I have written > routines using crypt allowing 16+ chars, and find that anything past 8 > is ignored. Wow. >

Re: [Dovecot] client limit and STARTTLS

2013-04-05 Thread Noel Butler
Hi David, On Fri, 2013-04-05 at 13:05 -0700, David Benfell wrote: > doveconf: Warning: service auth { client_limit=256 } is lower than > required under max. load (3072) > doveconf: Warning: service anvil { client_limit=256 } is lower than > required under max. load (2051) > service auth { >

Re: [Dovecot] maildirsize problem

2013-04-03 Thread Noel Butler
On Thu, 2013-04-04 at 02:27 +, mastertoi...@netzero.net wrote: > passdb { > driver = pam > } > > i am still not sure why maildirsize is not updating.thanks > ___ Because dovecot (dovecot-lda) is not delivering the mails to the maildir, postfix is. signature.asc Description:

Re: [Dovecot] Disk Encryption

2013-03-27 Thread Noel Butler
nope On Wed, 2013-03-27 at 07:23 -0400, Charles Marcus wrote: > Did anyone else get 13 identical copies of this response from Daniel??? > > On 2013-03-27 12:47 AM, Daniel Reinhardt wrote: > > If you are concerned about data being left on a hard drive when it fails > > and you are returning it t

Re: [Dovecot] Dovecot service not responding after about a week of uptime

2013-03-24 Thread Noel Butler
On Sun, 2013-03-24 at 21:22 +0100, Matthieu wrote: > >> Mar 24 19:13:21 hebus dovecot: master: Warning: /tmp is no longer mounted. > >> See http://wiki2.dovecot.org/Mountpoints > >> Mar 24 19:13:21 hebus dovecot: master: Warning: /var/tmp is no longer > >> mounted. See > >> http://wiki2.dovecot

Re: [Dovecot] Please help to make decision

2013-03-24 Thread Noel Butler
On Sun, 2013-03-24 at 20:12 +0400, Tigran Petrosyan wrote: > Hi > We are going to implement the "Dovecot" for 1 million users. We are going > to use more than 100T storage space. Now we examine 2 solutions NFS or GFS2 > via (Fibre Channel storage). > Can someone help to make decision? What kind of

Re: [Dovecot] Reduce logging auth-worker

2013-03-24 Thread Noel Butler
On Sat, 2013-03-23 at 10:57 +0100, Reindl Harald wrote: > _deleted usual drivell_ > > Anyone who knows anything about syslog on large production servers knows > > avoiding it is best practice, it's also about the only thing DJB and I > > ever agreed on > > blablablanla > > in large environm

Re: [Dovecot] Reduce logging auth-worker

2013-03-23 Thread Noel Butler
On Sat, 2013-03-23 at 03:28 +0100, Reindl Harald wrote: > maybe you should explain why not using syslog as > everybody else Why do you think you speak for everybody else? Because you sure as hell don't, so stop pretending to. WTF is in the air this week, it seems to contain a few self proclai

Re: [Dovecot] dovecot 2 in ubuntu 12.04 or Debian Squeeze

2013-03-18 Thread Noel Butler
On Mon, 2013-03-18 at 22:56 -0700, pvsuja wrote: > Mar 19 09:33:16 mailspace dovecot: imap(suja): Invalid certificate: self > signed certificate in certificate chain: /C=IN/ST=Karnataka/O=xxx/OU=YYY > CA/CN=mailserver.domain.com/emailAddress=sys...@domain.com > Mar 19 09:33:16 mailspace dovecot:

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-17 Thread Noel Butler
On Sun, 2013-03-17 at 21:30 -0700, David Benfell wrote: > > The standard response is also borne of frustration--a frustration that > seemingly expects people to worship the ground that developers walk on. > One thing that shows a good developer, is one who listens, to the negatives as well as

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-17 Thread Noel Butler
On Sun, 2013-03-17 at 09:13 -0500, Stan Hoeppner wrote: > On 3/17/2013 5:25 AM, Professa Dementia wrote: > > > We are very sorry you are not satisfied with the software. Please feel > > free to return the software for a full refund of all the money you paid. > > You do not speak on behalf of Do

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-17 Thread Noel Butler
On Sun, 2013-03-17 at 03:25 -0700, Professa Dementia wrote: > > And just a friendly word of advice: change your attitude or you will > find your cries fall on deaf ears. > > Dem > and that shit is helpful how? signature.asc Description: This is a digitally signed message part

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-17 Thread Noel Butler
On Sun, 2013-03-17 at 10:20 +, Daniel Reinhardt wrote: > I really find the lack of error logging, and the virtual lack of > documentation for Dovecot very disturbing. I am so close to dropping this > side project of being able to support multiple domains on a mail server. I know I came in l

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-16 Thread Noel Butler
On Sat, 2013-03-16 at 15:33 +0100, mourik jan heupink wrote: > destination_recipient_limit Not sure what happened there but evolution did not like all the chars in your post when invoking reply... probably time to update this darn thing, its the last ubuntu POS that hasn't been updated to opensu

Re: [Dovecot] Dovecot error wuth MySQL

2013-03-16 Thread Noel Butler
On Thu, 2013-03-14 at 11:32 +0100, Robert Schetterer wrote: > Am 14.03.2013 09:28, schrieb Cesar: > > dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone > > away: 125 Time(s)(125 Times Wow)For example part of maillog show me:About > > MySQL auth failed:Mar 10 03:55:05 ga

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-16 Thread Noel Butler
On Sat, 2013-03-16 at 00:47 +, Daniel Reinhardt wrote: > I got the permission issues fixed, so now I am unable to retrieve email via > imap or pop3 with either thunderbird, iphone, or webmail application. Is > there something I am not doing that is preventing this from working? > > POP3 and

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-16 Thread Noel Butler
On Fri, 2013-03-15 at 13:15 +0100, mourik jan heupink wrote: > > dovecot unix - n n - - pipe > >flags=DROhu user=postfix:postfix argv=/usr/libexec/dovecot/dovecot-lda > >-f ${sender} -a ${recipient} -d ${user}@${nexthop} > > And for what it's worth... here

Re: [Dovecot] Question regarding Postfix and Dovecot

2013-03-16 Thread Noel Butler
On Thu, 2013-03-14 at 07:26 -0400, Charles Marcus wrote: > > Fyi, dovecot list does not do reply-to-munging - meaning, if you only > click the 'Reply' button in your email program, it will only reply to > the original sender. > That's almost, but not entirely true. If you log in to mailman

Re: [Dovecot] Dovecot with sasl/imaps/postfix and thunderbird

2013-03-13 Thread Noel
an $20/year, takes literally 15 minutes from start to having a certificate. Well, maybe 30 minutes the first time when you need to read everything. There are probably dozens of other sites offering similar services; I've used this one several times. -- Noel Jones

Re: [Dovecot] Dovecot with sasl/imaps/postfix and thunderbird

2013-03-13 Thread Noel
t; account settings menu? > > Does anyone have any experience with configuring Outlook to use > self-signed certs? > > Thanks, > Alex This sounds like you're working on a fairly big project, so spend $20 and 15 minutes to get a REAL certificate for the test domain from one of the countless online vendors. Surely your time is worth something --- you've spent two days futzing around with this already, and aren't done yet. -- Noel Jones

Re: [Dovecot] Upgrading 1.2 to 2.x

2013-03-05 Thread Noel Butler
On Wed, 2013-03-06 at 00:06 +0100, Daniel Parthey wrote: > > WTF? Everything in one file is much nicer and easier, and you don't > > have to guess what option is in what file > > We're using a single file too, since this can be easily managed by > a configuration management system and avoids un

<    1   2   3   4   5   6   >