Re: [Dovecot] Feature Request: handle mail connections of the same user from a same IP using just one mail process

2014-04-14 Thread Alessio Cecchi
Il 11/04/2014 17:49, morrison ha scritto: Hi, Dovecot Wiki states that mail process (IMAP/POP3) is able to handle multiple client connections as the same time to save CPU and memory resources (client_limit 1). Although this approach is not recommended due to latency and probably security

[Dovecot] Feature Request: handle mail connections of the same user from a same IP using just one mail process

2014-04-11 Thread morrison
Hi, Dovecot Wiki states that mail process (IMAP/POP3) is able to handle multiple client connections as the same time to save CPU and memory resources (client_limit 1). Although this approach is not recommended due to latency and probably security issues, it does help increase the overall

Re: [Dovecot] Feature Request: handle mail connections of the same user from a same IP using just one mail process

2014-04-11 Thread Reindl Harald
Am 11.04.2014 17:49, schrieb morrison: Dovecot Wiki states that mail process (IMAP/POP3) is able to handle multiple client connections as the same time to save CPU and memory resources (client_limit 1). Although this approach is not recommended due to latency and probably security

Re: [Dovecot] Feature Request doveadm who for all sockets or limits

2014-02-14 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 12 Feb 2014, LuKreme wrote: On 12 Feb 2014, at 09:12 , Steffen Kaiser skdove...@smail.inf.fh-brs.de wrote: Some in-house program connected to auth-userdb, but did not closed the connection, Is there a way to set a timeout on the open

[Dovecot] Feature Request doveadm who for all sockets or limits

2014-02-12 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 10 Feb 2014, Steffen Kaiser wrote: login success imap: Error: Disconnected from auth server, aborting (client-pid=2296 client-id=17278) imap-login: Info: Internal login failure (pid=2296 id=17278) (internal failure, 1 successful auths)

Re: [Dovecot] Feature Request doveadm who for all sockets or limits

2014-02-12 Thread LuKreme
On 12 Feb 2014, at 09:12 , Steffen Kaiser skdove...@smail.inf.fh-brs.de wrote: Some in-house program connected to auth-userdb, but did not closed the connection, Is there a way to set a timeout on the open socket? Is it a socket? Would lsof show the connections? (assuming your kernel is

[Dovecot] Feature request about Info: Internal login failure (pid=2296 id=17278) (internal failure, 1 successful auths)

2014-02-10 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, since some time I'm plagued by internal login failures. With v2.2.10 I got the some additional error, that I should raise the process_limit for the imap service, then I got the hint to raise vsz_limit for the lmtp and imap serverices. These

[Dovecot] feature request: IMAP passdb prefetch

2013-08-02 Thread Richard Platel
It'd be useful for us if the IMAP passdb could be used as a prefetch userdb. The remote IMAP server could respond with something like * OK key=value * OK key=value SEQ OK [CAPABILITY ...] Logged in. Or * OK some JSON key value pairs SEQ OK [CAPABILITY ...] Logged in. Would anyone else find

[Dovecot] feature request: IMAP passdb prefetch

2013-08-02 Thread Richard Platel
On 2.8.2013, at 18.20, Richard Platel rpla...@tucows.com wrote: It'd be useful for us if the IMAP passdb could be used as a prefetch userdb. The remote IMAP server could respond with something like * OK key=value * OK key=value SEQ OK [CAPABILITY ...] Logged in. Or * OK some

Re: [Dovecot] feature request: IMAP passdb prefetch

2013-08-02 Thread Timo Sirainen
On 2.8.2013, at 18.20, Richard Platel rpla...@tucows.com wrote: It'd be useful for us if the IMAP passdb could be used as a prefetch userdb. The remote IMAP server could respond with something like * OK key=value * OK key=value SEQ OK [CAPABILITY ...] Logged in. Or * OK some JSON

[Dovecot] feature request: pipe for custom quota dict queries

2013-05-03 Thread Jeff Gustafson
Just a followup to my previous post. I appears that a pipe for quota queries via dict is not supported right now. Because of the way we group things we need more flexibility. I'd like to propose that dovecot should support quota queries just like userdb dict queries. My expertise

[Dovecot] Feature request: Configure CONFIG_MODULE_DIR and AUTH_MODULE_DIR at runtime

2013-04-23 Thread Rickard Nilsson
Hi! I am running dovecot 2.1.16 on NixOS (http://nixos.org), and I have been fighting the dynamically loaded dovecot modules/plugins a bit. The problem is that in Nix/NixOS all packages are completely isolated from each other (each package has a separate /lib, /libexec, /bin etc, with

Re: [Dovecot] Feature request: Configure CONFIG_MODULE_DIR and AUTH_MODULE_DIR at runtime

2013-04-23 Thread Timo Sirainen
On 23.4.2013, at 17.58, Rickard Nilsson rickard.nils...@telia.com wrote: I am running dovecot 2.1.16 on NixOS (http://nixos.org), and I have been fighting the dynamically loaded dovecot modules/plugins a bit. The problem is that in Nix/NixOS all packages are completely isolated from each

Re: [Dovecot] Feature request: Configure CONFIG_MODULE_DIR and AUTH_MODULE_DIR at runtime

2013-04-23 Thread Rickard Nilsson
Den 2013-04-23 17:20:02 skrev Timo Sirainen t...@iki.fi: On 23.4.2013, at 17.58, Rickard Nilsson rickard.nils...@telia.com wrote: The problem is the service and auth modules, that dovecot tries to load from the compile-time set MODULE_DIR/{settings,auth}. This is a problem for me,

Re: [Dovecot] Feature request: Configure CONFIG_MODULE_DIR and AUTH_MODULE_DIR at runtime

2013-04-23 Thread Professa Dementia
If you start/stop dovecot with an initscript or some other related system, you can do what SuSE does, since this problem occurs in lots of situations, not just dovecot. Since you know where all the config files are, you could either have the initscript set up a directory with symlinks, as

Re: [Dovecot] Feature request: add information to error message: client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket permissions)

2012-11-27 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 27 Nov 2012, Timo Sirainen wrote: On 2.11.2012, at 17.55, Steffen Kaiser wrote: Please add the information to this error, which socket has the problem and which uid access is and what is expected. For instance, when the quota dict

Re: [Dovecot] Feature request: add information to error message: client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket permissions)

2012-11-26 Thread Timo Sirainen
On 2.11.2012, at 17.55, Steffen Kaiser wrote: Please add the information to this error, which socket has the problem and which uid access is and what is expected. For instance, when the quota dict request fails, because of permission problems, you get a very detailed info about the

[Dovecot] Feature request: add information to error message: client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket permissions)

2012-11-02 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Please add the information to this error, which socket has the problem and which uid access is and what is expected. For instance, when the quota dict request fails, because of permission problems, you get a very detailed info about the current

Re: [Dovecot] Feature Request

2012-10-11 Thread Daniel Parthey
Timo Sirainen wrote: On 10.10.2012, at 5.40, Marc Perkel wrote: It would be handy (for me) if there were a userdb where a directory structure defined the db. userdb stat { mail_location=maildir:/fakedir/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } userdb stat {

[Dovecot] Feature Request

2012-10-09 Thread Marc Perkel
It would be handy (for me) if there were a userdb where a directory structure defined the db. userdb stat { mail_location=maildir:/fakedir/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } userdb stat { mail_location=maildir:/email/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } The idea being that if the

Re: [Dovecot] Feature Request

2012-10-09 Thread Marc Perkel
On 10/9/2012 7:29 PM, Timo Sirainen wrote: On 10.10.2012, at 4.34, Marc Perkel wrote: It would be handy (for me) if there were a userdb where a directory structure defined the db. userdb stat { mail_location=maildir:/fakedir/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } userdb stat {

Re: [Dovecot] Feature Request

2012-10-09 Thread Timo Sirainen
On 10.10.2012, at 5.40, Marc Perkel wrote: It would be handy (for me) if there were a userdb where a directory structure defined the db. userdb stat { mail_location=maildir:/fakedir/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } userdb stat {

Re: [Dovecot] Feature request

2012-07-17 Thread Timo Sirainen
On 7.7.2012, at 17.26, Malloc Kilobyte wrote: Appreciating all Dovecot rich features, I lack just one. And this is the ability to customize the quota exceeded, message rejected message. I know I can set it's default content using quota_exceeded_message parameter, but i would also like to have

Re: [Dovecot] Feature request

2012-07-08 Thread Malloc Kilobyte
On Sat, Jul 7, 2012 at 4:35 PM, Reindl Harald h.rei...@thelounge.netwrote: Am 07.07.2012 16:26, schrieb Malloc Kilobyte: Appreciating all Dovecot rich features, I lack just one. And this is the ability to customize the quota exceeded, message rejected message. I know I can set it's

[Dovecot] Feature request

2012-07-07 Thread Malloc Kilobyte
Hi, I am implementig Dovecot as a part of my new e-mail server, which is aimed to be replacement for proprietary software I've been using sofar. Appreciating all Dovecot rich features, I lack just one. And this is the ability to customize the quota exceeded, message rejected message. I know I

Re: [Dovecot] Feature request

2012-07-07 Thread Reindl Harald
Am 07.07.2012 16:26, schrieb Malloc Kilobyte: Appreciating all Dovecot rich features, I lack just one. And this is the ability to customize the quota exceeded, message rejected message. I know I can set it's default content using quota_exceeded_message parameter, but i would also like to

Re: [Dovecot] Feature request

2012-07-07 Thread Arnaud Abélard
On 07/07/2012 04:35 PM, Reindl Harald wrote: Am 07.07.2012 16:26, schrieb Malloc Kilobyte: Appreciating all Dovecot rich features, I lack just one. And this is the ability to customize the quota exceeded, message rejected message. I know I can set it's default content using

Re: [Dovecot] Feature request

2012-07-07 Thread Wojciech Puchar
Appreciating all Dovecot rich features, I lack just one. And this is the ability to customize the quota exceeded, message rejected message. I know no because SMTP mail delivery is not dovecot job.

[Dovecot] Feature request for maillog plugin

2012-02-20 Thread Aydın Demirel
Hi, Is it possible to add the modification time and file name of the mail file to maillog plugin? Thanks -- *Aydın Demirel Endersys Ltd. Sistem Destek Mühendisi/ System Support Engineer* * *Endersys is the first Advanced Business Partner of Red Hat in Turkey!

Re: [Dovecot] Feature request for maillog plugin

2012-02-20 Thread Timo Sirainen
On 20.2.2012, at 11.29, Aydın Demirel wrote: Is it possible to add the modification time That would be the same as IMAP INTERNALDATE / received-date. It would be possible to add this pretty easily. and file name of the mail file to maillog plugin? This would be much more difficult, because

[Dovecot] Feature request - search and tag protocol - notmuch-alike approach

2012-02-03 Thread Kirill A. Shutemov
Hi all, notmuch[1] becomes more and more popular. At least in geek community. But notmuch is local-only (except ssh)... It looks like it's hard (if even possible) to use IMAP as transport for notmuch-alike work flow. I think it would be great to create a new protocol based global search and

Re: [Dovecot] Feature request

2010-12-13 Thread Charles Marcus
On 2010-12-13 2:45 AM, Nikita Koshikov wrote: On Sat, 11 Dec 2010 10:23:43 -0500, Charles Marcus wrote: Did you already try deleting the local copy of the Inbox? The problem has solved. User account was recreated - that helped. Also, we have this problem with various dovecot (starting from

Re: [Dovecot] Feature request

2010-12-13 Thread Willie Gillespie
Charles Marcus wrote: Also - what version of Thunderbird is this? I'm going to guess that it's Thunderbird 3.x. It has an issue where sometimes it (somehow) decides that it needs to keep downloading all the messages over and over again until it fills the user's hard drive. I had it happen

Re: [Dovecot] Feature request

2010-12-13 Thread Nikita Koshikov
On Mon, 13 Dec 2010 06:16:56 -0500 Charles Marcus wrote: On 2010-12-13 2:45 AM, Nikita Koshikov wrote: On Sat, 11 Dec 2010 10:23:43 -0500, Charles Marcus wrote: Did you already try deleting the local copy of the Inbox? The problem has solved. User account was recreated - that helped.

Re: [Dovecot] Feature request

2010-12-13 Thread Charles Marcus
On 2010-12-13 6:24 AM, Willie Gillespie wrote: I'm going to guess that it's Thunderbird 3.x. It has an issue where sometimes it (somehow) decides that it needs to keep downloading all the messages over and over again until it fills the user's hard drive. Bug Number please? Never had that

Re: [Dovecot] Feature request

2010-12-13 Thread Willie Gillespie
On 12/13/2010 04:36 AM, Charles Marcus wrote: On 2010-12-13 6:24 AM, Willie Gillespie wrote: I'm going to guess that it's Thunderbird 3.x. It has an issue where sometimes it (somehow) decides that it needs to keep downloading all the messages over and over again until it fills the user's hard

Re: [Dovecot] Feature request

2010-12-12 Thread Nikita Koshikov
On Sat, 11 Dec 2010 10:23:43 -0500 Charles Marcus wrote: On 2010-12-11 3:00 AM, Nikita Koshikov wrote: Hello Timo, and all. Preface: From time to time we have problems with thunderbird. The problem is that mail client begin to sync users inbox (or other folder) and this process

[Dovecot] Feature request

2010-12-11 Thread Nikita Koshikov
Hello Timo, and all. Preface: From time to time we have problems with thunderbird. The problem is that mail client begin to sync users inbox (or other folder) and this process didn't stop. Last time we have this situation - our monitoring system shows unusual amount of imap traffic send to one

Re: [Dovecot] Feature request

2010-12-11 Thread Charles Marcus
On 2010-12-11 3:00 AM, Nikita Koshikov wrote: Hello Timo, and all. Preface: From time to time we have problems with thunderbird. The problem is that mail client begin to sync users inbox (or other folder) and this process didn't stop. Last time we have this situation - our monitoring

Re: [Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-11-03 Thread Ed W
Hi It would also appear at first glance that the rawlog doesn't work as I might expect when using COMPRESS ? I see something like this in my logs (but nothing further): 6 compress deflate 2v??uQ??s??? Yeah, rawlog logs the data it sees from imap process. The compression is started

Re: [Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-11-03 Thread Timo Sirainen
On Wed, 2010-11-03 at 12:40 +, Ed W wrote: Examining the raw data makes me suspect that we are missing the header data in the logged output? I'm trying to follow the code in imap_zlib_plugin.c, but I can't see how the logging works? Can you please help? Here:

[Dovecot] Feature request for maildir style boxes

2010-10-05 Thread David Ford
greetings, i'd like to ask for a certain feature request. dovecot:maildir_uidlist_recreate() to set the gid of new files based on the parent directory group ownership and normally that's desired, an appropriate security method. on our server, we use directory permissions to more stringently

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread Edgar Fuß
What if you create the topmost mail directory (and everyting below) with setgid set (or use BSD mkdir semantics)?

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread Timo Sirainen
On 5.10.2010, at 20.13, David Ford wrote: drwxr-x--- david net-mail /home/david/.maildir drwx-- david david /home/david/.maildir/cur Can you give me some use case for what the net-mail is used for? to something like: ( new_files_inherit_parent_gid = true ) I hate settings

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread Timo Sirainen
On 5.10.2010, at 23.38, David Ford wrote: net-mail group is used by sendmail, procmail, dovecot, and additional programs that read/write in the users mail directory. Can you give some specific examples? drwxr-x--- david net-mail /home/david/.maildir drwx-- david david

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread David Ford
On 10/05/2010 06:44 PM, Timo Sirainen wrote: On 5.10.2010, at 23.38, David Ford wrote: net-mail group is used by sendmail, procmail, dovecot, and additional programs that read/write in the users mail directory. Can you give some specific examples? i did. sendmail accesses .forward or

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread Timo Sirainen
On 6.10.2010, at 0.09, David Ford wrote: On 10/05/2010 06:44 PM, Timo Sirainen wrote: On 5.10.2010, at 23.38, David Ford wrote: net-mail group is used by sendmail, procmail, dovecot, and additional programs that read/write in the users mail directory. Can you give some specific examples?

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread David Ford
On 10/05/2010 07:17 PM, Timo Sirainen wrote: It can't do delivery as net-mail group if they're 0700. dovecot runs as my userid; david:david so it has permissions for accessing anything in .maildir/ and below. this is why it gets EPERM errors when it tries to set the group id of net-mail. it's

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread Timo Sirainen
On 6.10.2010, at 0.26, David Ford wrote: it's a bug in dovecot to assume a) the user wants this gid change even without setgid, and b) that it can change the gid to an arbitrary value of a parent directory. other software runs as something:net-mail, and it's use and operation is not

Re: [Dovecot] Feature request for maildir style boxes

2010-10-05 Thread David Ford
On 10/05/2010 07:35 PM, Timo Sirainen wrote: On 6.10.2010, at 0.26, David Ford wrote: it's a bug in dovecot to assume a) the user wants this gid change even without setgid, and b) that it can change the gid to an arbitrary value of a parent directory. other software runs as

Re: [Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-10-02 Thread Ed W
It would also appear at first glance that the rawlog doesn't work as I might expect when using COMPRESS ? I see something like this in my logs (but nothing further): 6 compress deflate 2v??uQ??s??? I'm trying to figure out why a client isn't working correctly (Profimail on N97),

Re: [Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-10-02 Thread Timo Sirainen
On 2.10.2010, at 15.46, Ed W wrote: It would also appear at first glance that the rawlog doesn't work as I might expect when using COMPRESS ? I see something like this in my logs (but nothing further): 6 compress deflate 2v??uQ??s??? Yeah, rawlog logs the data it sees from imap

[Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-10-01 Thread Ed W
Unless I have failed to read the manual for the second time in two days (?), it doesn't seem to be possible to get COMPRESS statistics at logout time from the IMAP protocol? Assuming not, then can I make a feature request that this might become available in some future version (pretty

Re: [Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-10-01 Thread Timo Sirainen
On Fri, 2010-10-01 at 18:16 +0100, Ed W wrote: Unless I have failed to read the manual for the second time in two days (?), it doesn't seem to be possible to get COMPRESS statistics at logout time from the IMAP protocol? Assuming not, then can I make a feature request that this might

Re: [Dovecot] Feature request - statistics for the COMPRESS imap protocol

2010-10-01 Thread Ed W
On 01/10/2010 18:34, Timo Sirainen wrote: On Fri, 2010-10-01 at 18:16 +0100, Ed W wrote: Unless I have failed to read the manual for the second time in two days (?), it doesn't seem to be possible to get COMPRESS statistics at logout time from the IMAP protocol? Assuming not, then can I make

[Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Thanos Chatziathanassiou
A relatively recent development that spammers got wind of is users that have username==password, with/without the domain. I am tracking numerous 1-off attempts from bots to gain access to mailboxes this way. Situation isn't made any better if you're also using dovecot as SMTP AUTH provider for

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Timo Sirainen
On 21.7.2010, at 12.29, Thanos Chatziathanassiou wrote: Would it be possible to deny login if username==password with a (non?)polite/custom message to go change your password to something less obvious ? What passdb do you use?

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Thanos Chatziathanassiou
Timo Sirainen wrote: On 21.7.2010, at 12.29, Thanos Chatziathanassiou wrote: Would it be possible to deny login if username==password with a (non?)polite/custom message to go change your password to something less obvious ? What passdb do you use? passwd-file with md5-crypt

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Timo Sirainen
On Wed, 2010-07-21 at 14:57 +0300, Thanos Chatziathanassiou wrote: Timo Sirainen wrote: On 21.7.2010, at 12.29, Thanos Chatziathanassiou wrote: Would it be possible to deny login if username==password with a (non?)polite/custom message to go change your password to something less

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Thanos Chatziathanassiou
Timo Sirainen wrote: On Wed, 2010-07-21 at 14:57 +0300, Thanos Chatziathanassiou wrote: Timo Sirainen wrote: On 21.7.2010, at 12.29, Thanos Chatziathanassiou wrote: Would it be possible to deny login if username==password with a (non?)polite/custom message to go change

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Charles Marcus
Thanos Chatziathanassiou wrote: A relatively recent development that spammers got wind of is users that have username==password, with/without the domain. I am tracking numerous 1-off attempts from bots to gain access to mailboxes this way. Situation isn't made any better if you're also using

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Leonardo Rodrigues
Em 21/07/2010 09:18, Timo Sirainen escreveu: I think this is one of the tons of different possible password policies and isn't really Dovecot's job. It really should be enforced while setting the password, not while checking it. i completly agree that dovecot is not the place for

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Martijn de Munnik
Op 21 jul 2010, om 15:06 heeft Leonardo Rodrigues het volgende geschreven: Em 21/07/2010 09:18, Timo Sirainen escreveu: I think this is one of the tons of different possible password policies and isn't really Dovecot's job. It really should be enforced while setting the password, not while

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Leonardo Rodrigues
Em 21/07/2010 10:08, Martijn de Munnik escreveu: the original message says about bot brute-force attacks, but we can be facing REAL brute-force attacks against a specific account and i think that some features to help mitigate those could indeed be interesting. And if those features

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Pascal Volk
On 07/21/2010 02:35 PM Thanos Chatziathanassiou wrote: Correct. Should be fairly easy to do - just need a compatible crypt() function in SQL. Never thought of that. MySQL's encrypt() is your friend: select encrypt('foo', 'ab'); select encrypt('foo', '$1$01234567'); select encrypt('foo',

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Eduardo M KALINOWSKI
On Qua, 21 Jul 2010, Leonardo Rodrigues wrote: i completly agree that dovecot is not the place for enforcing password policies nor checking them. but, still on the subject, maybe dovecot could have some features for helping sysadmins to avoid/mitigate brute-force attacks. As told,

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Pascal Volk
On 07/21/2010 03:06 PM Leonardo Rodrigues wrote: i was thinking on something like ... 1) after N tries (lets say 10 for example) of wrong username/password combinations, dovecot could start delaying the answers for wrong authentications coming from that specific IP address or

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Jerry
On Wed, 21 Jul 2010 14:29:10 +0300 Thanos Chatziathanassiou tcha...@arx.net articulated: A relatively recent development that spammers got wind of is users that have username==password, with/without the domain. I am tracking numerous 1-off attempts from bots to gain access to mailboxes this

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Leonardo Rodrigues
Em 21/07/2010 10:32, Pascal Volk escreveu: Install dovecot 2.0.rc3 and try to 'break in'. You will see how dovecot slows down your 'attack'. When you test it with your botnet ( ;-) ), use `doveadm penalty` to see current penalties. wooow nice to hear that i have not tried 2.0RC

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Leonardo Rodrigues
Em 21/07/2010 10:30, Eduardo M KALINOWSKI escreveu: I think none of this is dovecot's function. Let's keep the UNIX filosophy: one tool does one function, and does that function well. Dovecot is an execellent mail server. It should not be turned into a monster Windows-like application that

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Chris Hoogendyk
Pascal Volk wrote: On 07/21/2010 03:06 PM Leonardo Rodrigues wrote: i was thinking on something like ... 1) after N tries (lets say 10 for example) of wrong username/password combinations, dovecot could start delaying the answers for wrong authentications coming from that specific

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Pascal Volk
Only a wild guess: Did you set: disable_plaintext_auth = no? I've the default (disable_plaintext_auth = yes + ssl*) settings. _Sometimes_ I find log entries like: dovecot: pop3-login: Disconnected (tried to use disabled plaintext auth): rip=1.2.3.4, lip=5.6.7.8, mpid=0 Oh, and only pop3-login,

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Justin Krejci
To: Dovecot Mailing List Subject: Re: [Dovecot] Feature request: usernames and passwords I should note that the patterns of attack we are seeing are extremely sophisticated. They are going out of their way to be stealth with respect to detection strategies. We do still see the focused brute force

Re: [Dovecot] Feature request: usernames and passwords

2010-07-21 Thread Chris Hoogendyk
Justin Krejci wrote: Check out splunk (or similar) for multiple disparate event log correlations. I'm not really looking for solutions right now. I just wanted to comment on the stealth techniques in use by those running botnets. When I do look for solutions, I prefer open source tools

Re: [Dovecot] Feature request? Make deliver quota inclusive!

2010-02-18 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 14 Feb 2010, Joachim Boltz wrote: This is a important for me because sometimes users are lazy. They think oh, still 10% left, no reason to delete mail while in the meantime large messages are already bounced, while some small ones arrive in

Re: [Dovecot] Feature request? Make deliver quota inclusive!

2010-02-18 Thread Charles Marcus
On 2010-02-18 3:51 AM, Steffen Kaiser wrote: On Sun, 14 Feb 2010, Joachim Boltz wrote: This is a important for me because sometimes users are lazy. They think oh, still 10% left, no reason to delete mail while in the meantime large messages are already bounced, while some small ones arrive

[Dovecot] Feature request? Make deliver quota inclusive!

2010-02-14 Thread Joachim Boltz
hi all, I'd like to make deliver put mail into a nearly full mailbox even when they become overquota as a result. The same problem came up a few weeks ago: http://dovecot.org/list/dovecot/2010-January/045695.html Since no solution was offered may I suggest this topic as an additional feature for

[Dovecot] Feature request: 'dovecot-shared' files to be configurable

2009-09-24 Thread Hendrik Pahl
Hi list, using dovecot in a more complex environment nearly always requires use of ACLs and shared mailboxes/folders. Now, to make life more easy for the users, we can use 'dovecot-shared' files to eable per-user \seen-flagging. Is it possible to make this issue configurable in the dovecot

[Dovecot] feature request - zlib compression via LDA

2009-06-04 Thread J.P. Trosclair
Any chance of getting compression support via the zlib plugin for dovecot deliver in future versions?

Re: [Dovecot] feature request - zlib compression via LDA

2009-06-04 Thread Timo Sirainen
On Thu, 2009-06-04 at 16:52 -0500, J.P. Trosclair wrote: Any chance of getting compression support via the zlib plugin for dovecot deliver in future versions? Sure, if someone implements it. For me it's a very low priority. signature.asc Description: This is a digitally signed message part

Re: [Dovecot] feature request - zlib compression via LDA

2009-06-04 Thread J.P. Trosclair
Timo Sirainen wrote: On Thu, 2009-06-04 at 16:52 -0500, J.P. Trosclair wrote: Any chance of getting compression support via the zlib plugin for dovecot deliver in future versions? Sure, if someone implements it. For me it's a very low priority. Understood, was also wondering if a patch

Re: [Dovecot] feature request - zlib compression via LDA

2009-06-04 Thread Timo Sirainen
On Thu, 2009-06-04 at 17:05 -0500, J.P. Trosclair wrote: Timo Sirainen wrote: On Thu, 2009-06-04 at 16:52 -0500, J.P. Trosclair wrote: Any chance of getting compression support via the zlib plugin for dovecot deliver in future versions? Sure, if someone implements it. For me it's a very

Re: [Dovecot] feature request - zlib compression via LDA

2009-06-04 Thread J.P. Trosclair
Timo Sirainen wrote: On Thu, 2009-06-04 at 17:05 -0500, J.P. Trosclair wrote: Timo Sirainen wrote: On Thu, 2009-06-04 at 16:52 -0500, J.P. Trosclair wrote: Any chance of getting compression support via the zlib plugin for dovecot deliver in future versions? Sure, if someone implements it.

Re: [Dovecot] Feature Request: Control over IMP IDLE 'OK Still Here' message timings

2009-04-18 Thread Stian Jordet
Robert Goldsmith skrev: [...] Therefore, can you please make the timeout changeable from the config file, even if it defaults to the current 2min timing, so admins supporting mobile users can balance battery life with a need to prevent killed tcp connections. I'm amazed how you figured

[Dovecot] Feature Request: Control over IMP IDLE 'OK Still Here' message timings

2009-04-04 Thread Robert Goldsmith
Hi all, I would like to make a feature request regarding IMAP Idle support. Currently when a client triggers Idle support, Dovecot then sends 'OK Still Here' messages every 2 minutes. This is apparently to prevent NAT systems killing the tcp connection and disconnecting the client.

[Dovecot] Feature request (was Re: Apple patch 10)

2009-01-07 Thread fz . 2003
Here is a feature I wish Apple might consider implementing: When Dovecot is compiled for Mac OS X and using Maildir, have all mail files be written to disk with a dedicated OSType (equivalent to the .eml extension). This would make existing QuickLook generators and Spotlight importers

[Dovecot] Feature request: Force leave copy on server

2008-12-01 Thread Bárður Háskor
It would be very nice, if I could force users to leave a copy on the server when using POP3. This is because users primarily use a web interface to access mail (the web interface uses IMAP), but users can also download messages using POP3. Users who forget to set the Leave copy on server

Re: [Dovecot] Feature request: Force leave copy on server

2008-12-01 Thread Timo Sirainen
On Mon, 2008-12-01 at 11:41 +, Bárður Háskor wrote: It would be very nice, if I could force users to leave a copy on the server when using POP3. This is because users primarily use a web interface to access mail (the web interface uses IMAP), but users can also download messages

Re: [Dovecot] Feature request: Force leave copy on server

2008-12-01 Thread Timo Sirainen
On Tue, 2008-12-02 at 05:58 +0200, Timo Sirainen wrote: I guess it would be possible to create some kind of a virtual POP3 mailbox where expunging a message simply removes it from that virtual mailbox, but not from the primary mailbox that's visible to IMAP. While expunging a message in IMAP

[Dovecot] feature request for managesieve build from packager

2008-11-01 Thread seriv
Hi everybody, dovecot-1.2 alpha3 with cmusieve, libsieve and managesieve are available as rpm packages for Sisyphus repository (http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus, and specs/patches are available at http://git.altlinux.org/people/seriv/packages/?p=dovecot.git and

Re: [Dovecot] Feature Request - starting dovecot, config file behavior

2008-04-21 Thread Charles Marcus
On 4/21/2008 1:15 PM, Scott Silva wrote: So - how hard would it be to make dovecot simply accept the last defined setting read, instead of refusing to start? That seems like a major change in function. To some admins it would be like suddenly having to drive your car from the other side.

Re: [Dovecot] Feature Request - starting dovecot, config file behavior

2008-04-21 Thread Scott Silva
on 4-18-2008 3:43 AM Charles Marcus spake the following: Hey Timo, I was wondering how much trouble it would be to again emulate the way postfix does something - in this case, the way it reads its config file when starting up. Current behavior: Postfix: If postfix encounters the same

Re: [Dovecot] Feature Request - starting dovecot, config file behavior

2008-04-20 Thread Charles Marcus
On 4/18/2008 7:32 AM, Timo Sirainen wrote: On Fri, 2008-04-18 at 06:43 -0400, Charles Marcus wrote: Postfix: If postfix encounters the same setting defined more than once, the last one wins. This is how Dovecot also works, just tested.. Dovecot: If dovecot encounters the same setting

Re: [Dovecot] Feature request

2008-04-18 Thread Timo Sirainen
On Fri, 2008-03-28 at 11:40 +0100, Ruud Boon wrote: Hi! I hope I'm using the right mailing for a feature request. I'm using dovecot on my server for a year now and I'm very happy with it. Its extremely stable and fast. Ok what is my situation why I'm asking a feature.. Users are

[Dovecot] Feature Request - starting dovecot, config file behavior

2008-04-18 Thread Charles Marcus
Hey Timo, I was wondering how much trouble it would be to again emulate the way postfix does something - in this case, the way it reads its config file when starting up. Current behavior: Postfix: If postfix encounters the same setting defined more than once, the last one wins. Dovecot:

Re: [Dovecot] Feature Request - starting dovecot, config file behavior

2008-04-18 Thread Timo Sirainen
On Fri, 2008-04-18 at 06:43 -0400, Charles Marcus wrote: Postfix: If postfix encounters the same setting defined more than once, the last one wins. This is how Dovecot also works, just tested.. Dovecot: If dovecot encounters the same setting defined more than once it gives an error (also

Re: [Dovecot] Feature Request - starting dovecot, config file behavior

2008-04-18 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Apr 18, 2008 at 06:43:37AM -0400, Charles Marcus wrote: Hey Timo, I was wondering how much trouble it would be to again emulate the way postfix does something [...] [last config item should win] FWIW I was just bitten by something like

Re: [Dovecot] feature request: deny IP address via database

2008-04-08 Thread Javier García
Written by Bill Cole on Apr 7, 2008, at 4:58 PM: Hey folks. One feature I'd really like to see in dovecot is the ability to point it at a database (with a configurable query) and have it allow or deny a connection based on looking up the source IP address in that database. ... much

Re: [Dovecot] feature request: deny IP address via database

2008-04-08 Thread Timo Sirainen
On Mon, 2008-04-07 at 12:20 -0400, Dave McGuire wrote: Hey folks. One feature I'd really like to see in dovecot is the ability to point it at a database (with a configurable query) and have it allow or deny a connection based on looking up the source IP address in that database. passdb

[Dovecot] feature request: deny IP address via database

2008-04-07 Thread Dave McGuire
Hey folks. One feature I'd really like to see in dovecot is the ability to point it at a database (with a configurable query) and have it allow or deny a connection based on looking up the source IP address in that database. I run Postfix, and I've got it configured to use a

  1   2   >