Re: [Dovecot] 1 Dovecot proxy to 2 real IMAP servers

2009-04-30 Thread Timo Sirainen
On Thu, 2009-04-30 at 10:09 +0400, Proskurin Kirill wrote: > >> I want to add one Dovecot Proxy server and make him understand based on > >> user domain - were it need to transfer a connection. > > > > Where would you keep the domain -> IP mapping? Dovecot needs

Re: [Dovecot] 1 Dovecot proxy to 2 real IMAP servers

2009-04-29 Thread Proskurin Kirill
Timo Sirainen wrote: On Fri, 2009-04-24 at 12:40 +0400, Proskurin Kirill wrote: Hello all. I have 2 Dovecot IMAP servers with different mailboxes. What serves different email domains. I want to add one Dovecot Proxy server and make him understand based on user domain - were it need to

Re: [Dovecot] 1 Dovecot proxy to 2 real IMAP servers

2009-04-29 Thread Timo Sirainen
On Fri, 2009-04-24 at 12:40 +0400, Proskurin Kirill wrote: > Hello all. > > I have 2 Dovecot IMAP servers with different mailboxes. What serves > different email domains. > > I want to add one Dovecot Proxy server and make him understand based on > user domain - were

Re: [Dovecot] 1 Dovecot proxy to 2 real IMAP servers

2009-04-25 Thread Mark Costlow
omains. > > I want to add one Dovecot Proxy server and make him understand based on > user domain - were it need to transfer a connection. > I use LDAP auth based on "mail" attribute. > > It is possible? > > P.S. Proxy documentation at dovecot.org not help a

[Dovecot] 1 Dovecot proxy to 2 real IMAP servers

2009-04-24 Thread Proskurin Kirill
Hello all. I have 2 Dovecot IMAP servers with different mailboxes. What serves different email domains. I want to add one Dovecot Proxy server and make him understand based on user domain - were it need to transfer a connection. I use LDAP auth based on "mail" attribute. It i

Re: [Dovecot] proxy and master user

2008-12-13 Thread Timo Sirainen
On Fri, 2008-12-05 at 17:43 +0100, Matthieu Herrb wrote: > Hi > > For some application we need a master user on our IMAP servers. We use > dovecot 1.1.7 in proxy mode, with proxy_maybe (some mailboxes are on the > proxy itself, others are on remote servers, also running dovecot). > > But the prox

[Dovecot] proxy and master user

2008-12-05 Thread Matthieu Herrb
Hi For some application we need a master user on our IMAP servers. We use dovecot 1.1.7 in proxy mode, with proxy_maybe (some mailboxes are on the proxy itself, others are on remote servers, also running dovecot). But the proxy removes the '*master' suffix from the username when using the master

Re: [Dovecot] Dovecot Proxy with MySQL auth

2008-12-04 Thread Justin Krejci
proxy_maybe servers in front of our legacy pop/imap server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Krejci Sent: Sunday, November 30, 2008 1:50 AM To: 'Timo Sirainen' Cc: 'Dovecot Mailing List' Subject: Re: [Dovecot] Dove

Re: [Dovecot] Dovecot Proxy with MySQL auth

2008-11-29 Thread Justin Krejci
The info is appreciated, thanks for the update! We will try it out and respond with feedback. -Original Message- From: Timo Sirainen [mailto:[EMAIL PROTECTED] Sent: Saturday, November 29, 2008 7:49 PM To: Justin Krejci Cc: 'Dovecot Mailing List' Subject: Re: [Dovecot] Dovecot

Re: [Dovecot] Dovecot Proxy with MySQL auth

2008-11-29 Thread Timo Sirainen
On Wed, 2008-11-26 at 11:56 -0600, Justin Krejci wrote: > http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > At the bottom of this page it gives a query example of "SELECT NULL AS > password, ." but that does not seem to allow for us to use the proxy_maybe Right. The example is for a

Re: [Dovecot] Dovecot Proxy with MySQL auth

2008-11-28 Thread Justin Krejci
I get the feeling not many people are using Dovecot proxy with MySQL auth. Is there anyone who has done this before? We might end up going with something like NGINX for the proxy instead if we cannot figure out if and how this should work for our type of scenario but it would be nice if we could

[Dovecot] Dovecot Proxy with MySQL auth

2008-11-26 Thread Justin Krejci
We are looking at deploying several pop/imap servers to house the mail for 15,000 or more mailbox accounts. We are contemplating on the design and are looking at using MySQL auth (we already have a MySQL environment in place for our user auth to live) and proxy_maybe so each server can proxy for al

Re: [Dovecot] Proxy logging destuser

2008-08-30 Thread Timo Sirainen
On Tue, 2008-08-26 at 07:20 +0200, Paul Gamble - MWEB wrote: > Hi Timo > > The patch you provided to allow Dovecot-as-proxy's login processes to > log the "destuser" only does so for successful authentications/logins. > What is the possibility that this information could additionally be > logged f

Re: [Dovecot] Proxy logging destuser

2008-08-25 Thread Paul Gamble - MWEB
valid user-name/invalid password? The patch mentioned is: http://hg.dovecot.org/dovecot-1.1/raw-rev/5d0406541434 Regards -Original Message- From: Timo Sirainen [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 10:22 PM To: Paul Gamble - MWEB Cc: Dovecot Mailing List Subject: Re: [Dovecot

Re: [Dovecot] Proxy logging destuser

2008-08-14 Thread Timo Sirainen
On Aug 14, 2008, at 4:42 AM, Paul Gamble - MWEB wrote: Aug 14 10:14:03 withnail dovecot: imap-login: MYPROXY pid=6516, [EMAIL PROTECTED], method=PLAIN, rsock=127.0.0.1:48157, lsock=127.0.0.1:1143, proto=IMAP, secured proxy([EMAIL PROTECTED]): started proxying to 127.0.0.1:143/pgamble*master: Aug

Re: [Dovecot] Proxy logging destuser

2008-08-14 Thread Paul Gamble - MWEB
le" for this (along the lines of %u, %p, %s, etc, etc)? Regards, Paul Gamble -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Timo Sirainen Sent: 14 August 2008 09:12 AM To: Paul Gamble - MWEB Cc: dovecot@dovecot.org Subject: Re: [Dovecot] Proxy

Re: [Dovecot] Proxy logging destuser

2008-08-14 Thread Timo Sirainen
On Aug 14, 2008, at 2:36 AM, Paul Gamble - MWEB wrote: Is it possible for a Dovecot proxy's login process (IMAP and POP3) to include the "destuser", i.e. the uid used to authenticate to the backend IMAP/POP3 server, in its logging? "%u" gives me the uid provided by the client of course, but

[Dovecot] Proxy logging destuser

2008-08-13 Thread Paul Gamble - MWEB
Hi All My first post to the list, so "hello world"! Having searched the list archives and the wiki for an answer to this, I don't think it is possible. However, let me ask nonetheless... Is it possible for a Dovecot proxy's login process (IMAP and POP3) to include the "destuser", i.e. the uid

Re: [Dovecot] Connection problems using dovecot proxy

2008-04-29 Thread Adrian Wojcicki | Unternehmensberatung Wojcicki
Timo Sirainen wrote: On Thu, 2008-04-24 at 16:02 +0300, Timo Sirainen wrote: On Wed, 2008-04-23 at 16:00 +0200, Adrian Wojcicki | Unternehmensberatung Wojcicki wrote: Now, while this setup works using Thunderbird, iPhone, etc. I have problems connecting using a Samsung Qbowl. It simply aborts w

Re: [Dovecot] Connection problems using dovecot proxy

2008-04-24 Thread Timo Sirainen
On Thu, 2008-04-24 at 16:02 +0300, Timo Sirainen wrote: > On Wed, 2008-04-23 at 16:00 +0200, Adrian Wojcicki | > Unternehmensberatung Wojcicki wrote: > > Now, while this setup works using Thunderbird, iPhone, etc. I have > > problems connecting using a Samsung Qbowl. It simply aborts with a > > c

Re: [Dovecot] Connection problems using dovecot proxy

2008-04-24 Thread Timo Sirainen
On Wed, 2008-04-23 at 16:00 +0200, Adrian Wojcicki | Unternehmensberatung Wojcicki wrote: > Now, while this setup works using Thunderbird, iPhone, etc. I have > problems connecting using a Samsung Qbowl. It simply aborts with a > connection error. .. > Could somebody point me into a direction whe

[Dovecot] Connection problems using dovecot proxy

2008-04-23 Thread Adrian Wojcicki | Unternehmensberatung Wojcicki
ogs on the imap server but they don't long anything (They do log access from other imap clients but nothing from the phone). Could somebody point me into a direction where to look next? LOGS: Dovecot proxy: # 1.0.5: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path:

Re: [Dovecot] Proxy Problems

2008-03-28 Thread Richard Cooper
ting up dovecot: Mar 27 13:07:12 Info: auth(default): passwd-file /root/ dovecot-proxy-test.passwd: Read 1 users dovecot: Mar 27 13:07:29 Info: auth(default): client in: AUTH 1PLAINservice=IMAPlip=192.168.0.1rip=192.168.0.2 resp=WWVzIEkgYW5vbnltaXNlZCB0aGlzIHRvbyA7LSk= dove

Re: [Dovecot] Proxy Problems

2008-03-27 Thread Scott Silva
efault): passwd-file /root/dovecot-proxy-test.passwd: Read 1 users dovecot: Mar 27 13:07:29 Info: auth(default): client in: AUTH1 PLAINservice=IMAPlip=192.168.0.1rip=192.168.0.2 resp=WWVzIEkgYW5vbnltaXNlZCB0aGlzIHRvbyA7LSk= dovecot: Mar 27 13:07:29 Info: auth(default): client o

[Dovecot] Proxy Problems

2008-03-27 Thread Richard Cooper
g for more information." Can anyone help me shed light on this problem? Here's the log (Username, password and IPs have been anonymised): dovecot: Mar 27 13:07:11 Info: Dovecot v1.0.rc15 starting up dovecot: Mar 27 13:07:12 Info: auth(default): passwd-file /root/ dovecot-proxy-test.passwd:

Re: [Dovecot] proxy logging

2008-02-05 Thread Timo Sirainen
On Mon, 2008-02-04 at 10:41 -0200, bugtraq wrote: > sql([EMAIL PROTECTED],127.0.0.1): query: SELECT pw_clear_passwd AS password, > pw_domain AS domain, '192.168.224.1' AS host, 'Y' AS nologin, 'Y' AS > nodelay, 'Y' AS proxy FROM vpopmail WHERE pw_name = 'diego' AND > pw_domain = 'domain' limit 1 I

Re: [Dovecot] proxy logging

2008-02-04 Thread bugtraq
Yes, the proxy verifies if that password is correct before forward and I want to insert a record on sql table if is succesfuly or not. On one of proxy (/var/log/dovecot.log) I can see: dovecot: Feb 04 10:31:16 Info: auth(default): client in: AUTH 1 PLAIN service=imapsecured lip=127.0.0.1

Re: [Dovecot] Using dovecot proxy as multi-account aggregator?

2008-01-31 Thread Timo Sirainen
On Mon, 2008-01-28 at 17:03 +0200, Mika Boström wrote: > - mails from different remote accounts combined to the single client > connection What exactly does this mean? You'd want to serve multiple mail accounts to a client using a single IMAP connection? That would require some kind of virtual m

Re: [Dovecot] proxy logging

2008-01-31 Thread Timo Sirainen
On Thu, 2008-01-24 at 23:38 -0200, diego wrote: > Hi, I'm testing dovecot 1.1.beta14 on two debian etch with > drbd+ocfs2[active/active], I use qmail+vpopmail(userdb) and three > front-end with openbsd 4.2 with dovecot 1.1.beta14 as proxy with passdb > sql through vpopmail database. > Is posible

[Dovecot] Using dovecot proxy as multi-account aggregator?

2008-01-28 Thread Mika Boström
Good day. I am trying to build a rather weird setup. The basic idea is to have a relatively simple IMAP client and let dovecot do the actual connections. So far both the documentation and my trials on this front have been rather fruitless. The desired components: - 1 dovecot server, acti

Re: [Dovecot] proxy configuration

2008-01-27 Thread WJCarpenter
> Patrick Ben Koetter wrote: > Ed W wrote: Thanks to both for your comments; very helpful. I just wanted to make sure it could work in practice before I spent some time on it. Sounds like it can be done.

Re: [Dovecot] proxy configuration

2008-01-27 Thread Ed W
Lessons learned? It works and it worked immediately. Store backend host information as IP address and not as host name. I have a setup similar to what the OP described. The other missing ingredient is that in current stable version you need to change your mysql query to avoid returning

Re: [Dovecot] proxy configuration

2008-01-26 Thread Patrick Ben Koetter
oxy them from > whatever machine they happen to hit to their home machine. > > Except for the "proxy_maybe" feature advertised for dovecot 1.1, I > don't see a surefire way to do this. Has anyone done it, or can > anyone say for sure that it can't reasonably be done

[Dovecot] proxy configuration

2008-01-26 Thread WJCarpenter
Before I spend some time experimenting with what might be impossible, maybe someone can just tell me (either "how" or that it's impossible). I'd like to get perdition out of my environment (mainly to have one less moving part in my architecture). I'm looking at dovecot's built-in proxying. In my

[Dovecot] proxy logging

2008-01-24 Thread diego
Hi, I'm testing dovecot 1.1.beta14 on two debian etch with drbd+ocfs2[active/active], I use qmail+vpopmail(userdb) and three front-end with openbsd 4.2 with dovecot 1.1.beta14 as proxy with passdb sql through vpopmail database. Is posible to add logs into vpopmail.vlog from proxys?, like "update

Re: [Dovecot] Proxy setup between two servers

2007-09-30 Thread Timo Sirainen
On Fri, 2007-09-28 at 16:10 +0530, Abhijit Hoskeri wrote: > Info: Dovecot v1.0.rc15 starting up .. > Info: auth(default): client out: OK 1 user=hoskeriproxy > host=192.168.1.5pass= I think rc15 still required that you return also "nologin" variable. signature.asc Descriptio

Re: [Dovecot] Proxy setup between two servers

2007-09-28 Thread Abhijit Hoskeri
On Thu, Sep 27, 2007 at 09:38:16PM +0100, Ed W wrote: > Hi > > >I have not yet tried to proxy to some other host. > > > > See my question a week or so previously. (Using mysql though). I am trying out that patch now. Thanks. > > Basically you need to return a null entry to mean "this machin

Re: [Dovecot] Proxy setup between two servers

2007-09-27 Thread Ed W
Hi I have not yet tried to proxy to some other host. See my question a week or so previously. (Using mysql though). Basically you need to return a null entry to mean "this machine", otherwise you return the IP of the machine you want to proxy to. Timo suggested a very interesting patch

[Dovecot] Proxy setup between two servers

2007-09-27 Thread Abhijit Hoskeri
Hi, I am trying to set up a proxy between two dovecot servers. I have the following set up here. Dovecot version: 1.0.rc15 dovecot -n: # /etc/dovecot/dovecot.conf info_log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 imap login_dir: /var/run/dovecot/login

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-15 Thread Timo Sirainen
On Thu, 2007-09-13 at 02:29 +0100, Ed W wrote: > 5188[50431f8]: 2998a00:mail.mailasail.com:S-INBOX.Drafts:SendData: 10 > append "INBOX.Drafts" (\Seen \Draft) {598+} .. > 2998a00:mail.mailasail.com:S-INBOX.Drafts:CreateNewLineFromSocket: 10 NO > Error in IMAP command received by server. IIRC Cour

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-13 Thread Ed W
HenkJan Wolthuis wrote: Hi, I am trying to do a staged migration over to dovecot, but having troubles at the first hurdle. I setup the proxy feature to redirect most of our users back to the current Courier imap/pop server, and it's partly working, but I'm getting Maybe your courier server do

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-13 Thread HenkJan Wolthuis
Hi, I am trying to do a staged migration over to dovecot, but having troubles at the first hurdle. I setup the proxy feature to redirect most of our users back to the current Courier imap/pop server, and it's partly working, but I'm getting Maybe your courier server doesn't support some extens

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-12 Thread Ed W
5188[50431f8]: 2998a00:mail.mailasail.com:S-INBOX.Drafts:SendData: 5188[50431f8]: ReadNextLine [stream=2e682c8 nb=49 needmore=0] 5188[50431f8]: 2998a00:mail.mailasail.com:S-INBOX.Drafts:CreateNewLineFromSocket: 10 NO Error in IMAP command received by server. I just tried this connecting ba

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-12 Thread Ed W
# dovecot -n # 1.0.5: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ protocols: imap imaps pop3 pop3s listen: [87.106.95.71] ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-12 Thread Ed W
Thanks Troy Can anyone help translate this (also why it's only breaking through the proxy mode?) 5188[50431f8]: 2998a00:mail.mailasail.com:A:CreateNewLineFromSocket: 4 OK LSUB completed 5188[50431f8]: 2998a00:mail.mailasail.com:A:SendData: 5 lsub "" "#shared.*" 5188[50431f8]: ReadNextLine

Re: [Dovecot] Proxy problems with 1.0.5 !

2007-09-12 Thread Troy Engel
Ed W wrote: All I'm getting from Thunderbird is an "Invalid Command" response. Is there an easy way to get a look inside the imap stream to try and see what's failing? From the client end of things: http://wiki.dovecot.org/Debugging/Thunderbird -te -- Troy Engel | Systems Engineer Fluid I

[Dovecot] Proxy problems with 1.0.5 !

2007-09-12 Thread Ed W
Hi I am trying to do a staged migration over to dovecot, but having troubles at the first hurdle. I setup the proxy feature to redirect most of our users back to the current Courier imap/pop server, and it's partly working, but I'm getting some serious errors using Thunderbird and IMAP. No

Re: [Dovecot] securing dovecot proxy connections

2007-09-06 Thread Ken A
WJCarpenter wrote: ka> per another current thread (o/s tuning for imap), I've installed ka> imapproxy, and it supports starttls to the backend imap server. It ka> doesn't use encryption on the incoming connections though, since ka> they are presumably from localhost (squirrelmail). Ken That's a

Re: [Dovecot] securing dovecot proxy connections

2007-09-05 Thread Marcin Michal Jessa
WJCarpenter wrote: > wjc> Is there a way to configure dovecot's internal proxy connections > wjc> to use STARTTLS or some other SSL/TLS level of security? > wjc> (Without a > > mmj> Just create encrypted tunnel between the peers and send your > mmj> traffic through it. IPSec, ssh etc.. > > Thanks

Re: [Dovecot] securing dovecot proxy connections

2007-09-05 Thread WJCarpenter
ka> per another current thread (o/s tuning for imap), I've installed ka> imapproxy, and it supports starttls to the backend imap server. It ka> doesn't use encryption on the incoming connections though, since ka> they are presumably from localhost (squirrelmail). Ken That's an interesting thought

Re: [Dovecot] securing dovecot proxy connections

2007-09-05 Thread Ken A
more research, I don't know what the interaction is between the real client, the dovecot proxy, and the destination server.) per another current thread (o/s tuning for imap), I've installed imapproxy, and it supports starttls to the backend imap server. It doesn't use encryption

Re: [Dovecot] securing dovecot proxy connections

2007-09-05 Thread WJCarpenter
wjc> Is there a way to configure dovecot's internal proxy connections wjc> to use STARTTLS or some other SSL/TLS level of security? wjc> (Without a mmj> Just create encrypted tunnel between the peers and send your mmj> traffic through it. IPSec, ssh etc.. Thanks for the suggestion. I had though

Re: [Dovecot] securing dovecot proxy connections

2007-09-05 Thread Marcin Michal Jessa
SSL/TLS level of security? (Without a > bunch more research, I don't know what the interaction is between the > real client, the dovecot proxy, and the destination server.) > Just create encrypted tunnel between the peers and send your traffic through it. IPSec, ssh etc..

[Dovecot] securing dovecot proxy connections

2007-09-05 Thread WJCarpenter
know what the interaction is between the real client, the dovecot proxy, and the destination server.) -- [EMAIL PROTECTED] (WJCarpenter)PGP 0x91865119 38 95 1B 69 C9 C6 3D 2573 46 32 04 69 D6 ED F3

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-27 Thread Steven F Siirila
On Wed, Mar 28, 2007 at 01:58:34AM +0300, Timo Sirainen wrote: > On Tue, 2007-03-27 at 17:27 -0500, Steven F Siirila wrote: > > > > I don't know about that, but what I'm asking is.. how many people > > are allowing IMAP/POP3 connections (with authentication via user/pw) > > over non-secure (non-S

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-27 Thread Timo Sirainen
On Tue, 2007-03-27 at 17:27 -0500, Steven F Siirila wrote: > > I don't know about that, but what I'm asking is.. how many people > are allowing IMAP/POP3 connections (with authentication via user/pw) > over non-secure (non-SSL/TLS) connections? I wouldn't think there > would be many nowadays, an

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-27 Thread Steven F Siirila
On Tue, Mar 27, 2007 at 11:28:54PM +0300, Timo Sirainen wrote: > On 27.3.2007, at 3.35, Steven F Siirila wrote: > > >>The problem with this is that it would require adding asynchronous > >>DNS > >>library to Dovecot, or alternatively hoping that your DNS server is > >>never down (and hanging whe

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-27 Thread Timo Sirainen
On 27.3.2007, at 3.35, Steven F Siirila wrote: The problem with this is that it would require adding asynchronous DNS library to Dovecot, or alternatively hoping that your DNS server is never down (and hanging when it is). I don't really want to implement the latter, and adding async DNS libra

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-26 Thread Steven F Siirila
On Tue, Mar 27, 2007 at 01:03:54AM +0300, Timo Sirainen wrote: > On Tue, 2007-03-27 at 00:56 +0300, Apostolos Papayanakis wrote: > > Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > > > > > > > host=s: The destination server's *IP address*. This field is required. > >

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-26 Thread Apostolos Papayanakis
O/H Timo Sirainen έγραψε: On Tue, 2007-03-27 at 00:56 +0300, Apostolos Papayanakis wrote: Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy host=s: The destination server's *IP address*. This field is required. Note that currently it's required to use an IP addre

Re: [Dovecot] proxy host specified as fqdn in userdb

2007-03-26 Thread Timo Sirainen
On Tue, 2007-03-27 at 00:56 +0300, Apostolos Papayanakis wrote: > Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy > > > > > host=s: The destination server's *IP address*. This field is required. > > Note that currently it's required to use an IP address since no DNS > >

[Dovecot] proxy host specified as fqdn in userdb

2007-03-26 Thread Apostolos Papayanakis
Abstract from http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy host=s: The destination server's *IP address*. This field is required. Note that currently it's required to use an IP address since no DNS resolving is done. Hello Timo, Here goes one more item for the v2.0 wishlist:

<    1   2   3