Re: Dovecot book for a newbie

2021-07-07 Thread li...@lazygranch.com
On Wed, 07 Jul 2021 10:04:06 -0700 techli...@phpcoderusa.com wrote: > > > Hi, > > Please recommend a Dovecot book for a newbie... I have a fair amount > of Linux PHP hosting experience - LAMP virtual host configurations. > I'm new to BIND, Postfix, and Dovecot. > > I'm running Ubuntu 20.04l

Re: CVE-2021-33515: SMTP Submission service STARTTLS injection

2021-06-22 Thread li...@lazygranch.com
On Mon, 21 Jun 2021 13:51:30 +0200 Timo Sirainen wrote: > Open-Xchange Security Advisory 2021-06-21 > > Product: Dovecot > Vendor: OX Software GmbH > Internal reference: DOV-4583 (Bug ID) > Vulnerability type: CWE-74: Failure to Sanitize Data into a Different > Plane ('Injection') Vulnerable

Re: no shared cipher openssl

2020-11-16 Thread li...@lazygranch.com
On Sun, 15 Nov 2020 17:31:07 -0500 Mike Schroeder wrote: > CentOS 7 > Dovecot 2.2.36 > > Nov 14 07:13:08 mail dovecot: pop3-login: Disconnected (no auth > attempts in 0 secs): > user=<>, rip=73.0.0.0, lip=192.64.118.242, TLS handshaking: > SSL_accept() failed: > error:1408A0C1:SSL routines:ss

10-ssl ssl = no but dovecot still reads certs

2017-06-16 Thread li...@lazygranch.com
I'm bringing up a new email server starting without TLS initially. In 10-ssl.conf I set ssl = no, but the default ssl_cert and ssl_key lines are not commented out. I got the obvious error message: -- doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/con

Re: Problem with Dovecot and BlackBerry

2017-04-05 Thread li...@lazygranch.com
On Tue, 04 Apr 2017 11:07:26 + Luca Bertoncello wrote: > Hi all, > > i've got a strange behaviour with a BlackBerry Classic Phone (BBOS > 10.3.2.2876) in combination with Dovecot 2.2.13 while trying to > fetch mails. > > Before burying myself into debugging sessions, i try to get an > u

OP/PSA: Net Systems Research mail port diddlers

2017-01-05 Thread li...@lazygranch.com
http://netsystemsresearch.com/ dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS handshaking: Disconnected, session= Their "research" pokes your email ports. Block if you want or participate in the (cough co