Re: [Dovecot] Fixed a Duplicate?

2008-05-18 Thread Timo Sirainen
On May 19, 2008, at 3:12 AM, Nigel Allen wrote: The file dovecot-shared does exist in the Maildir directory ~/ Maildir/. I read that this file also has to exist in each folder under Maildir so I created them (as the folders where created outside of dovecot. Yes, for all folders you want sh

Re: [Dovecot] Fixed a Duplicate?

2008-05-18 Thread Nigel Allen
Timo Sirainen wrote: On Mon, 2008-05-19 at 09:20 +1000, Nigel Allen wrote: For exaample, every time I open a folder from this shared account, I get either one or two emails being created on the spot. The are /always/ created with the current date and time stamp (i.e. now) and at the same ti

Re: [Dovecot] Fixed a Duplicate?

2008-05-18 Thread Timo Sirainen
On Mon, 2008-05-19 at 09:20 +1000, Nigel Allen wrote: > For exaample, every time I open a folder from this shared account, I get > either one or two emails being created on the spot. The are /always/ > created with the current date and time stamp (i.e. now) and at the same > time a tail -f of ma

Re: [Dovecot] RFC 3516 - IMAP4 Binary Content Extension

2008-05-18 Thread Timo Sirainen
On Mon, 2008-05-19 at 02:48 +0400, Anton Yuzhaninov wrote: > Is Binary Content Extension (rfc3516) support planned? It's not in my near-term plans. Where are you planning on using it? Are there some clients that support it? signature.asc Description: This is a digitally signed message part

[Dovecot] Fixed a Duplicate?

2008-05-18 Thread Nigel Allen
Greetings We have recently switched from mbox to Maildir so that we can implement symlinks for a large email account that is shared (partially) between some 20 or so users. The setup is dovecot-1.0.3-6.fc6, procmail-3.22-17.1, sendmail-8.13.8-2. Procmail has a single recipe in /etc/procmail

[Dovecot] RFC 3516 - IMAP4 Binary Content Extension

2008-05-18 Thread Anton Yuzhaninov
Is Binary Content Extension (rfc3516) support planned? -- WBR, Anton Yuzhaninov

[Dovecot] Auto-subscribe to folders

2008-05-18 Thread Juan Asensio Sánchez
Hi I will use autocreate plugin in a new installation, and client has asked me if the users can be auto-subscribed to certain folders. Example: the users will have an autocreated Junk folder (for SPAM) and we want the users not to be un-subscribed for this folder; so if the user wants to be unsubs

[Dovecot] Domain variable in checkpassword

2008-05-18 Thread sawyer x
Hello everyone I'm using the checkpassword method but I don't get the domain a user inputs. I can't cross check per virtual domains if I'm not getting one, which means it renders all my efforts useless. I've tried sending %d as a variable to my checkpassword script, but I'm just getting %d instea

Re: [Dovecot] Looking for suggestions: How to strip attachments from mails

2008-05-18 Thread mouss
Patrick Nagel wrote: Hi, I know this is not 100% on-topic, but I'll try anyway... I'm looking for a way to strip attachments from incoming mails on the server. The attachments should be stored on a file server (where users have access via SAMBA) and only a link to the file (UNC path) should r

Re: [Dovecot] compile troubles - stat.mtim - 1.1hg

2008-05-18 Thread Timo Sirainen
On Sun, 2008-05-18 at 16:46 +0200, Jakob Hirsch wrote: > Daniel Black wrote: > > > having trouble compiling dovecot-1.1hg latest pull > > dito. > > ST_MTIME_NSEC is ((unsigned long)(st).st_mtim.tv_nsec) (at least on my > system), but st in maildir-uidlist.c:322 is a pointer, so -> has to be use

Re: [Dovecot] compile troubles - stat.mtim - 1.1hg

2008-05-18 Thread Jakob Hirsch
Daniel Black wrote: having trouble compiling dovecot-1.1hg latest pull dito. ST_MTIME_NSEC is ((unsigned long)(st).st_mtim.tv_nsec) (at least on my system), but st in maildir-uidlist.c:322 is a pointer, so -> has to be used. Here's a (quick'n'dirty, probably incomplete) patch: diff -r 6ab

[Dovecot] compile troubles - stat.mtim - 1.1hg

2008-05-18 Thread Daniel Black
having trouble compiling dovecot-1.1hg latest pull I'm amost thinking _GNU_SOURCE needs to be defined as its built to work Any suggestions welcome. make[4]: Nothing to be done for `all'. make[4]: Leaving directory `/home/dan/software_projects/dovecot-1.1/src/lib-storage/list' Making all in inde

Re: [Dovecot] Postfix & Dovecot LDA

2008-05-18 Thread Jens Dönhoff
Hi. I know, this is a pretty old thread, but since I just ran into similar problems while setting up my one-user-per-virtual-domain postfix + multi-instance-dovecot/-lda, I thought I might share my "fix" in this related (and most useful) thread. My setup might not be used often - I am runni

Re: [Dovecot] problem about mbox with quota

2008-05-18 Thread Zhang Huangbin
Hi, Timo. Timo Sirainen wrote: On May 18, 2008, at 5:13 AM, Zhang Huangbin wrote: Hi, all. Does mbox format support quota? dirsize backend should work pretty well. dovecot: May 18 02:10:36 Error: POP3([EMAIL PROTECTED]): Unknown quota backend: storage=10240 You need to select the backen

Re: [Dovecot] problem about mbox with quota

2008-05-18 Thread Timo Sirainen
On May 18, 2008, at 5:13 AM, Zhang Huangbin wrote: Hi, all. Does mbox format support quota? dirsize backend should work pretty well. dovecot: May 18 02:10:36 Error: POP3([EMAIL PROTECTED]): Unknown quota backend: storage=10240 You need to select the backend. user_query = SELECT 2000 AS

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Timo Sirainen
On Sun, 2008-05-18 at 12:45 +0200, Matthias Andree wrote: > On Sun, 18 May 2008, Timo Sirainen wrote: > > > > passdb vpopmail { > > > #args = > > > } > > > > vpopmail would be one possibility, I have some doubts about its > > security. > > Can you detail the spots you deem could take som

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Matthias Andree
On Sun, 18 May 2008, Timo Sirainen wrote: > > passdb vpopmail { > > #args = > > } > > vpopmail would be one possibility, I have some doubts about its > security. Can you detail the spots you deem could take some more observation or investigation? vpopmail, after all, is highly popular in

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Timo Sirainen
On Sun, 2008-05-18 at 15:03 +0800, Lawrence Sheed wrote: > Corrected that in the conf file. > > If I check the dovecot user, I see its been compromised also - a bunch > of crap in their login folder. What crap? By login folder do you mean /var/run/do[t]vecot/login? It's supposed to have some fi

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Timo Sirainen
On Sun, 2008-05-18 at 13:52 +0800, Lawrence Sheed wrote: It would be helpful to have some more information, such as: > If I run dovecot for a while, I see a /var/run/dotvecot folder created > with the following: > > drwxr-xr-x 3 rootroot4096 2008-05-18 13:30 dotvecot .. > I've

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Matthias Andree
On Sun, 18 May 2008, Lawrence Sheed wrote: > Anyone want to assist in finding out how they are getting in? How about setting up rawlog? Details in the Wiki. > Definitely dovecot related. If I don't run dovecot, seems secure. As > soon as I run dovecot, after a few minutes - rooted... Is you

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Andraž 'ruskie' Levstik
On 10:18:50 2008-05-18 Lawrence Sheed <[EMAIL PROTECTED]> wrote: > I am running Debian on both servers, but updated both the keys and the > ssh server as I saw it on Slashdot. > > (A few days ago). > > The intrusion seems to be around the 13th. > They changed the dovecot configuration (as noted)

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Lawrence Sheed
I am running Debian on both servers, but updated both the keys and the ssh server as I saw it on Slashdot. (A few days ago). The intrusion seems to be around the 13th. They changed the dovecot configuration (as noted). If I turned off the iptables firewalling, I see that port 6244 and 6243 ha

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Andraž 'ruskie' Levstik
Are you perhaps running a debian host with compromised keys(see recent debian+ssl issues)? -- Andraž "ruskie" Levstik Source Mage GNU/Linux Games grimoire guru Geek/Hacker/Tinker Be sure brain is in gear before engaging mouth. Ryle hira. Key id = F4C1F89C Key fingerprint = 6FF2 8F20 4C9D DB36 B5

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Robert Tomanek
Hello Lawrence, Sunday, May 18, 2008, 9:19:40 AM, you wrote: > I'll do the rest offlist. Please don't. Finding out it wasn't your Dovecot installation that was compromised is valuable information here (as is the opposite, of course). -- Best regards, Robert Tomanekmailto:[EMAIL

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Odhiambo Washington
On Sun, May 18, 2008 at 10:19 AM, Lawrence Sheed < [EMAIL PROTECTED]> wrote: > Typically before I kill a system thats been compromised, I try to find out > the reason, so it DOESNT happen again. > > In this instance I have 2 systems with exactly the same "issue" > > Both were running smoothly unti

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Lawrence Sheed
Typically before I kill a system thats been compromised, I try to find out the reason, so it DOESNT happen again. In this instance I have 2 systems with exactly the same "issue" Both were running smoothly until about last week, then load spikes were observed. In both systems, the the attac

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Odhiambo Washington
On Sun, May 18, 2008 at 10:03 AM, Lawrence Sheed < [EMAIL PROTECTED]> wrote: > Corrected that in the conf file. > > If I check the dovecot user, I see its been compromised also - a bunch of > crap in their login folder. > I didn't create the dovecot.conf with a /var/run/dotvecot though, so > someo

Re: [Dovecot] Security Hole in 1.0.13?

2008-05-18 Thread Lawrence Sheed
Corrected that in the conf file. If I check the dovecot user, I see its been compromised also - a bunch of crap in their login folder. I didn't create the dovecot.conf with a /var/run/dotvecot though, so someone else did that. More updates as I check further. On May 18, 2008, at 2:54 PM, A