Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Thomas Zajic
* Hippo Man, 23.05.22 22:54 [...] However, this does not drop connections that are existing and already open. It will only drop *future* connections from that IP address to port 143. This is why I want to kill the existing connection. Even after that "iptables" command is issued, the entity whi

Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Péter Márton
Just for clarification (this probably won't help achieve your primary goal to reset the connections): Iptables can block future connections _and_ stop existing connections to receive (and send) packets (even the command you posted). What it can't do is closing existing connections (sending a FIN).

Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread John Tulp
i googled a little, i was just curious about your question. found a stackoverflow question which, answered, says that using gdb one can close the fd, after using lsof to find it out. oh, and your iptables command... you have the address aaa. etc with a -d, i think you mean the source ip address o

Re: enable/control fts-tika debug logging in Dovecot 2.3.18 + Tika Server 2.4.0?

2022-05-23 Thread PGNet Dev
On 5/23/22 8:16 PM, Michael Slusarz wrote: Unfortunately, Tika has not yet been converted to events/categories with the ability to more granularly enable debugging just for this component. Aha! Thx. It's probably easier to just look at tika's debugging logs. The default log level (at least

Re: enable/control fts-tika debug logging in Dovecot 2.3.18 + Tika Server 2.4.0?

2022-05-23 Thread Michael Slusarz
> On 05/23/2022 5:27 PM PGNet Dev wrote: > > how to correctly turn on debug/verbose logging for fts-tika use in/by dovecot? mail_debug = yes This turns on HTTP debugging for the outgoing Tika requests. Unfortunately, Tika has not yet been converted to events/categories with the ability to mor

enable/control fts-tika debug logging in Dovecot 2.3.18 + Tika Server 2.4.0?

2022-05-23 Thread PGNet Dev
i run dovecot-2.3.18-1.fc36.x86_64 i've installed Apache Tika, v 2.4.0 ls -al tika-server-standard-2.4.0.jar -rw-r--r-- 1 root root 59M May 2 09:53 tika-server-standard-2.4.0.jar tika's listening telnet 127.0.0.1 9998 Trying 127.0.0.1...

Re: doveadm mailbox status -u p...@scom.ca -t all (syntax)

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
thanks Happy Monday !!! Thanks - paul Paul Kudla Scom.ca Internet Services 004-1009 Byron Street South Whitby, Ontario - Canada L1N 4S3 Toronto 416.642.7266 Main 1.866.411.7266 Fax 1.888.892.7266 Email p...@scom.ca On 5/23/2022 6:40 PM, Patrick Domack wrote: dovead

Re: doveadm mailbox status -u p...@scom.ca -t all (syntax)

2022-05-23 Thread Patrick Domack
Don't you mean: doveadm mailbox status -t all -u 'p...@scom.ca' '*' Quoting "Paul Kudla (SCOM.CA Internet Services Inc.)" : & # doveadm mailbox status -t all -u 'p...@scom.ca' 'p...@scom.ca' doveadm(p...@scom.ca): Error: Mailbox p...@scom.ca: Failed to lookup mailbox status: Character no

Re: doveadm mailbox status -u p...@scom.ca -t all (syntax)

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
& # doveadm mailbox status -t all -u 'p...@scom.ca' 'p...@scom.ca' doveadm(p...@scom.ca): Error: Mailbox p...@scom.ca: Failed to lookup mailbox status: Character not allowed in mailbox name: '.' messages=0 recent=0 unseen=0 vsize=0 & # doveadm mailbox status -t all 'p...@scom.ca' doveadm

doveadm mailbox status -u p...@scom.ca -t all (syntax)

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
Ok I know this is a general question and at my level I should be able to figure this out all i want is the complete status of an inbox ? # doveadm mailbox status -u p...@scom.ca -t all keeps returning doveadm mailbox status [-u |-A] [-S ] [...] ie no specific error. and no

Re: dovecot-fts-solr Solr9 support

2022-05-23 Thread Shawn Heisey
On 5/17/2022 11:32 AM, PGNet Dev wrote: CaffeineCache  _should_ be a solution for both series. I'm just starting to do a bit of testing, but so far, indexing/search with Caffeine seems quicker, at least. I do not yet know in which case(s) CaffeineCache is _not_ an appropriate solution. Caffei

Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Hippo Man
OOPS! I incorrectly copied and pasted the iptables command in my previous message. Here is the correct iptables command: iptables -I INPUT -p tcp -m multiport --destination-port 143,993 -d aaa.bbb.ccc.ddd -j DROP This command successfully blocks *future* connections to ports 143 and 993 from that

Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
Ok would like to help and I DO understand the issue at hand. It took me with custom programming 5 years of tinkering to get to what i have today. So a few questions / comments ?? Are you running an sql database or just user-db (local) to do the lookups ? sql gives you some major flexabilit

Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Hippo Man
Thank you, but fail2ban doesn't do what I need. Here is why ... I have used fail2ban and also my own homegrown log monitor program for this purpose. In both cases, I can detect the failed imap logins and then cause the following command to be run ... iptables -I INPUT -p tcp --destination-port aa

Re: Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Jan Hugo Prins
Look at fail2ban. Should be able to do that for you. Jan Hugo On 5/23/22 21:11, Lloyd Zusman wrote: I'm running dovecot 2.2.13 under Debian 8. I'd like to force an immediate TCP socket disconnect after any imap login attempt that fails. Right now, if invalid credentials are supplied during

Force TCP socket disconnect on imap login failure?

2022-05-23 Thread Lloyd Zusman
I'm running dovecot 2.2.13 under Debian 8. I'd like to force an immediate TCP socket disconnect after any imap login attempt that fails. Right now, if invalid credentials are supplied during an imap login, the client can keep retrying logins with different credentials. However, I want to prevent

Many Thanks to the Programmers

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
I am still in testing mode with 2.3.19 but the replication with the folders over 300+ seems to be fixed everything synced ok on its own within 30 minutes Again MUSH APPRECIATED ! Moving to 2.3.19 was woth it! -- Happy Monday !!! Thanks - paul Paul Kudla Scom.ca Internet Services

Re: mail_replica in userdb?

2022-05-23 Thread Coy Hile
> On May 23, 2022, at 11:42 AM, Paul Kudla (SCOM.CA Internet Services Inc.) > wrote: > > > So are you ok now I don’t know that. I don’t know if what I’m trying to do is actually supported as yet. I’m going to setup the downstream replica for this box after I finish work today and try to cu

Re: mail_replica in userdb?

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
So are you ok now I'm a postgresql kinda guy never got around to ldap as that was mostly windows based! fyi Happy Monday !!! Thanks - paul Paul Kudla Scom.ca Internet Services 004-1009 Byron Street South Whitby, Ontario - Canada L1N 4S3 Toronto 416.642.7266 Main 1

Re: mail_replica in userdb?

2022-05-23 Thread Coy Hile
> On May 23, 2022, at 11:00 AM, Paul Kudla (SCOM.CA Internet Services Inc.) > wrote: > > > ok there is more to replica setup > > user-db error seems to indicate the sql iterate it not setup or not returning > stuff properly > > can you specify what you are using for a sql setup (if any) >

Re: mail_replica in userdb?

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
my apologies i read through the other posts after responding you are using ldap ? Happy Monday !!! Thanks - paul Paul Kudla Scom.ca Internet Services 004-1009 Byron Street South Whitby, Ontario - Canada L1N 4S3 Toronto 416.642.7266 Main 1.866.411.7266 Fax 1.888.892.

Re: mail_replica in userdb?

2022-05-23 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
ok there is more to replica setup user-db error seems to indicate the sql iterate it not setup or not returning stuff properly can you specify what you are using for a sql setup (if any) can help from there? Happy Monday !!! Thanks - paul Paul Kudla Scom.ca Internet Services

Re: mail_replica in userdb?

2022-05-23 Thread Coy Hile
> On May 23, 2022, at 3:20 AM, Aki Tuomi wrote: > >> >> On 22/05/2022 02:32 Coy Hile wrote: >> >> >> I seem to have got replication working from an older instance to a newer one >> (insofar as the data are present on the new box) that I’m looking to stand >> up to replace a newer box. In

Re: SQL user_query quota_rule for *:messages=

2022-05-23 Thread James
On 23/05/2022 08:18, Aki Tuomi wrote: Is it possible to override the message count limit with an SQL user_query (and password_query)? I tried returning userdb_quota_rule2 in the SQL but it did not work. "SELECT ... '*:messages=' || maxcount AS userdb_quota_rule2 ...;" Ref: https://doc.dove

Re: Dovecot 2.3.18 and OpenMetrics-Prometheus problem

2022-05-23 Thread Aki Tuomi
> On 25/03/2022 08:41 Aki Tuomi wrote: > > > > On 17/03/2022 17:54 Aki Tuomi wrote: > > > > > > > On 17/03/2022 17:23 Christian Rößner wrote: > > > > > > > > > Hi, > > > > > > > Am 17.03.2022 um 10:43 schrieb Eirik Rye : > > > > > > > > On 25/02/2022 11:50, Christian Rößner wrote: >

Re: mail_replica in userdb?

2022-05-23 Thread Aki Tuomi
> On 22/05/2022 02:32 Coy Hile wrote: > > > I seem to have got replication working from an older instance to a newer one > (insofar as the data are present on the new box) that I’m looking to stand up > to replace a newer box. In this case, nothing is configured to talk to the > new machin

Re: SQL user_query quota_rule for *:messages=

2022-05-23 Thread Aki Tuomi
> On 20/05/2022 16:41 James wrote: > > > Hello, > > dovecot.conf sets the system default quota for storage and message count: > > plugin { > ... >quota_rule = *:storage=1G >quota_rule2 = *:messages=1 > ... > } > > This quota_rule for the storage is overridden by an SQL