On 22/01/2025 07:26 EET Marco Fioretti via dovecot
<dovecot@dovecot.org> wrote:
Greetings,
I just woke up and went back to try to diagnose the problem I first
reported in my other thread, and noticed something weird. After your
suggestions, the situation is as follow:
0) FTR, postfix is working, if I open the local mailboxes with mutt
running
on the server I do see email coming in as expected, from mailing
lists and
our correspondents
1) output of dovecot -n is below
2) both "ss -tuln | grep 993" and "netstat -tanp" show NO activity
/presence on port 993
3) BUT, running "service dovecot status" (see output below, I only
changed
server and user name) I noticed a failed authentication attempt from
SOMEUSER2, happened ~15/20 minutes before I checked, where "SOMEUSER"
(without the trailing "2") is an ACTUAL user of the old server, and
200.89.159.59 an IP address I don't know (not my desktop's for sure,
and
AFAIK no legitimate user is trying to use the server at this time,
they
know I'm rebuilding it...)
Now the question is, OK, that attempt may be some attacker trying to
get
in, this happens but... HOW is he succeeding to TRY to connect, if
dovecot
doesn't appear to be listening at all??? And of course, does this
help in
any way to figure out what is wrong with my configuration?
Thanks,
Marco
Try adding
protocols = imap
Aki
_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org
