Re: [Dovecot] disbale to responded to an unrequested SSL Certificate

2008-09-30 Thread Christopher J. Buckley
Andre Hübner wrote: Hi dovecot-list, just a easy question today ;) Customer did on Server a PCI-Test to test security to fit worldpay requirements. NB: PCI is not to fit Worldpay's requirements; but rather the body of PCI-DSS (Visa & Mastercard). 1. What was the scanning tool? Qualys? 2. W

Re: [Dovecot] quota warnings clarification

2008-09-30 Thread Ian B
> > Well... the main use for Quotas is for rejecting NEW > messages at > delivery time - not for controlling a static set of > mailboxes. > > Are you saying you didn't even test by sending yourself > a test message? > > -- > The way I was testing was by setting the quota warning threshold lo

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Stephan Bosch
Timo Sirainen wrote: > On Tue, 2008-09-30 at 10:47 -0700, Seth Mattinen wrote: > >> Timo Sirainen wrote: >> >>> Maybe I'm overthinking the problem. There probably won't be more than a >>> few scripts. It's probably simplest if the quota is always just >>> recalculated by lstat()ing the file

Re: [Dovecot] Test environment question

2008-09-30 Thread Stewart Dean
Timo Sirainen wrote: On Mon, 2008-09-22 at 13:04 -0400, Stewart Dean wrote: Sep 22 11:54:13 egg mail:err|error dovecot: IMAP(sdean): posix_fallocate() faile d: Protocol not available See if this helps: http://hg.dovecot.org/dovecot-1.1/rev/ad13463328aa My apologies for not gettin

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Timo Sirainen
On Tue, 2008-09-30 at 10:47 -0700, Seth Mattinen wrote: > Timo Sirainen wrote: > > Maybe I'm overthinking the problem. There probably won't be more than a > > few scripts. It's probably simplest if the quota is always just > > recalculated by lstat()ing the files. > > > Pretty much what I was thi

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Seth Mattinen
Timo Sirainen wrote: > Maybe I'm overthinking the problem. There probably won't be more than a > few scripts. It's probably simplest if the quota is always just > recalculated by lstat()ing the files. Pretty much what I was thinking about doing. Calculate total size of the sieve scripts and compa

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Timo Sirainen
On Mon, 2008-09-29 at 10:01 -0700, Seth Mattinen wrote: > Timo Sirainen wrote: > > On Thu, 2008-09-25 at 09:40 -0700, Seth Mattinen wrote: > >> Has anyone (is anyone) working on adding quota support to dovecot's > >> managesieve server? I was thinking about giving it a shot myself and I'd > >> hate

Re: [Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread Rick Romero
FYI, Nessus scans are used for PCI Compliance. So if you've got all the plugins, you're good to go for vulnerability checks. IIRC, !SSLv2 was my solution when the SSL thing came up last year for PCI Compliance (previous job). Rick Timo Sirainen wrote: BTW. Dovecot v1.1 has by default: s

Re: [Dovecot] create folder automatically

2008-09-30 Thread Eduardo M KALINOWSKI
Seth Mattinen escreveu: > Nicolas Letellier wrote: > >> Hello. >> >> I install a sieve rule automatically when a mailbox is created, like: >> if exists "X-Spam-Flag" { >> fileinto "Junk"; >> stop; >> } >> >> However, sometimes, this folder does not exist. How create it automatica

Re: [Dovecot] create folder automatically

2008-09-30 Thread Seth Mattinen
Nicolas Letellier wrote: > Hello. > > I install a sieve rule automatically when a mailbox is created, like: > if exists "X-Spam-Flag" { > fileinto "Junk"; > stop; > } > > However, sometimes, this folder does not exist. How create it automatically? > It is created automatically

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Timo Sirainen
On Sep 30, 2008, at 6:48 PM, Sascha Wilde wrote: On Sep 30, 2008, at 6:08 PM, Sascha Wilde wrote: Is there a %%h, too? So that, if we have mail_location = maildir:~ .. Another (more specific) problem in this context: Is is it possible to determine a users home calling an external program l

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Sascha Wilde
Timo Sirainen <[EMAIL PROTECTED]> writes: > On Sep 30, 2008, at 6:08 PM, Sascha Wilde wrote: > Is there a %%h, too? So that, if we have mail_location = maildir:~ >>> .. Another (more specific) problem in this context: Is is it possible to determine a users home call

Re: [Dovecot] disbale to responded to an unrequested SSL Certificate

2008-09-30 Thread Andre Hübner
Hi List, Hi dovecot-list, just a easy question today ;) Customer did on Server a PCI-Test to test security to fit worldpay requirements. They found a critical risk at pop3s. (and some other things) This is the Textmesage: Family: Remote Shell Access Critical 993/tcp 11875 Des

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Timo Sirainen
On Sep 30, 2008, at 6:08 PM, Sascha Wilde wrote: Is there a %%h, too? So that, if we have mail_location = maildir:~ .. Another (more specific) problem in this context: Is is it possible to determine a users home calling an external program like checkpassword? This would be needed in an

[Dovecot] create folder automatically

2008-09-30 Thread Nicolas Letellier
Hello. I install a sieve rule automatically when a mailbox is created, like: if exists "X-Spam-Flag" { fileinto "Junk"; stop; } However, sometimes, this folder does not exist. How create it automatically? Thanks! Regards, -- -Nicolas.

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Sascha Wilde
Timo Sirainen <[EMAIL PROTECTED]> writes: > On Tue, 2008-09-30 at 10:46 +0200, Sascha Wilde wrote: >> > namespace shared { >> > separator = / >> > # %%u gets expanded to the remote user. Instead of %%u you can >> > # also use %%n and %%d. >> > prefix = shared/%%u/ >> > location = Maildir

Re: [Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread Timo Sirainen
BTW. Dovecot v1.1 has by default: ssl_cipher_list = ALL:!LOW:!SSLv2 I'd think that's enough to fix this too. On Tue, 2008-09-30 at 10:23 -0400, John Gray wrote: > I *think* you can fix this in your config. > > ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM > > Consider yourself luck

Re: [Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread John Gray
I *think* you can fix this in your config. ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM Consider yourself lucky you're not using UW. I believe you need to recompile it. Nessus thinks I'm good with the setting above. John Amit Thakkar wrote: > Hello, > > I work for an organizatio

[Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread Amit Thakkar
Hello, I work for an organization that uses a Secure Dovecot server for messaging, and recently we've had to undergo some security screenings for PKI compliance (credit card industry standards). However, the screening returned to us a failure due to the following reason (attributed to our Dove

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Timo Sirainen
On Tue, 2008-09-30 at 10:46 +0200, Sascha Wilde wrote: > > namespace shared { > > separator = / > > # %%u gets expanded to the remote user. Instead of %%u you can > > # also use %%n and %%d. > > prefix = shared/%%u/ > > location = Maildir:/home/%%u/Maildir:INDEX=~/Maildir/shared/%%u > > }

[Dovecot] dovecot quota messages

2008-09-30 Thread Cosmin Natea
Hi. I have a question about quota messages (dovecot 1.1.3). I'm trying to use quota messages for moving messages in a new folder when they reach a certain number(1). I made the script which is called when quota_warning condition is met. Then i made a rule to exclude that folder from quota, quot

Re: [Dovecot] quota warnings clarification

2008-09-30 Thread Charles Marcus
On 9/30/2008, Ian B ([EMAIL PROTECTED]) wrote: > It turns out I wasn't doing anything wrong, but just misunderstanding > at what point the warnings are generated. The warning email appears > to only be generated when a message is moved from one folder to > another. I was expecting the warning to be

[Dovecot] dovecot quota messages problem

2008-09-30 Thread costexx
Hi. I have a question about quota messages (dovecot 1.1.3). I'm tryng to use quota messages for moving messages in a new folder when they reach a certin number(1). I made the script which is called when quota_warning condition is met. Then i made a rule to exclude that folder from quota, quota

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Sascha Wilde
Timo Sirainen <[EMAIL PROTECTED]> writes: > Well, I actually started it today since it's needed for replication: > http://hg.dovecot.org/dovecot-1.2/rev/6dd0c6755afe > > Mailboxes can't be listed yet (and I'm not planning on implementing that > anytime soon), but if you add the wanted mailboxes to