Re: maildirfolder file created in maildir root during auto-creation with 2.3.4.1 but not 2.2.27

2021-09-02 Thread Christian Balzer
Aki > > > On 02/09/2021 11:21 Christian Balzer wrote: > > > > > > Hello, > > > > it is now nearly 2 years later and we are running 2.3.13 with this bug > > still present. > > Would be nice if it were acknowledged at least if not even fix

Re: maildirfolder file created in maildir root during auto-creation with 2.3.4.1 but not 2.2.27

2021-09-02 Thread Christian Balzer
Feb 2020 16:13:37 +0900 Christian Balzer wrote: > Hello, > > On Wed, 5 Feb 2020 08:58:29 +0200 Aki Tuomi wrote: > > > Can you provide full doveconf -n output? Also how are you delivering mail? > > > As pretty much implied, Exim is delivering mails, w/o problems. >

Re: maildirfolder file created in maildir root during auto-creation with 2.3.4.1 but not 2.2.27

2020-02-04 Thread Christian Balzer
l pop3 { mail_plugins = quota } --- Regards, Christian > Aki > > On 5.2.2020 4.24, Christian Balzer wrote: > > > > Hello, > > > > as the tin says. > > I have several servers running 2.2.27 (Debian stretch) and am adding new > > ones with 2.3.4.1 (Deb

maildirfolder file created in maildir root during auto-creation with 2.3.4.1 but not 2.2.27

2020-02-04 Thread Christian Balzer
home directory (maildir root), preventing exim from correctly creating/using maildirsize. a) Is this expected behavior and can it be changed? b) How can I disable inbox auto-creation if a) doesn't pan out? Thanks, Christian -- Christian BalzerNetwork/Systems Engineer ch.

Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-09-03 Thread Christian Balzer via dovecot
19 9996 2540 0.0 \_ dovecot/stats [17 connections] 4725 ?S 0:00 0 356 87703 8048 0.1 \_ dovecot/auth [0 wait, 0 passdb, 0 userdb] --- Regards, Christian On Sat, 31 Aug 2019 11:30:12 +0900 Christian Balzer via dovecot wrote: > Daniel, > > thanks so much

Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-08-30 Thread Christian Balzer via dovecot
ct that to work. Regards, Christian On Fri, 30 Aug 2019 17:44:23 +0200 Daniel Lange via dovecot wrote: > Am 30.08.19 um 17:38 schrieb Daniel Lange via dovecot: > > Am 30.08.19 um 10:00 schrieb Christian Balzer via dovecot: > >> When upgrading on Debian Stretch with the secur

Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-08-30 Thread Christian Balzer via dovecot
d/or unit files doing a stop and start when the new imapd package is installed. Can anybody think of a quick workaround or fix for this, as it's clearly not intended behavior (nor needed for this issue). Thanks, Christian -- Christian BalzerNetwork/Systems Engineer

Re: Anyone using object storage ceph?

2019-05-15 Thread Christian Balzer via dovecot
> https://github.com/ceph-dovecot/dovecot-ceph-plugin > https://docplayer.net/docs-images/40/9935441/images/page_13.jpg > -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Rakuten Communications

Re: Push Notification clarification (MessageNew w/o LMTP or LDA)

2019-05-08 Thread Christian Balzer via dovecot
Hello, On Thu, 9 May 2019 09:14:13 +0300 Aki Tuomi via dovecot wrote: > On 9.5.2019 9.01, Christian Balzer via dovecot wrote: > > Hello, > > > > Both the examples on the Push Notification wiki page and the XAPS plugin > > docs seem to suggest or state that LMTP/LD

Push Notification clarification (MessageNew w/o LMTP or LDA)

2019-05-08 Thread Christian Balzer via dovecot
trigger MessageNew? Regards, Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Rakuten Communications

Re: v2.2.31 release candidate released

2017-06-22 Thread Christian Balzer
umption that the Dovecot end actually works. Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Rakuten Communications

Re: [BUG] doveadm kick doesn't play well with hibernate

2017-05-14 Thread Christian Balzer
On Sun, 14 May 2017 23:34:39 +0300 Timo Sirainen wrote: > On 12 May 2017, at 5.14, Christian Balzer wrote: > > > > > > Hello, > > > > Dovecot 2.2.27 (Debian Jessie backports). > > > > When issuing a "doveadm kick" for a specific user I

[BUG] doveadm kick doesn't play well with hibernate

2017-05-11 Thread Christian Balzer
absolutely crucial for us as we need this for our custom mailbox migration functionality. If there's no workaround or fix within 2 months I'll be forced to disable hibernation again (with a heavy heart). Regards, Christian -- Christian BalzerNetwork/Systems Engineer

Re: V1 Dovecot POP3 index migrate to V3

2017-04-24 Thread Christian Balzer
op3_uidl_format = %v.%u" should do the trick and if you're using maildir (we do) you can in addition set "pop3_save_uidl = yes" and in the future change to different UID format. Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

Re: [BUG] client state / Message count mismatch with imap-hibernate and mixed POP3/IMAP access

2017-04-23 Thread Christian Balzer
Hello, On Thu, 6 Apr 2017 20:04:38 +0900 Christian Balzer wrote: > Hello Aki, Timo, > > according to git this fix should be in 2.2.27, which I'm running, so I > guess this isn't it or something else is missing. > See: > https://bugs.debian.org/cgi-bin/bugreport.cgi?

Re: IMAP hibernate and scalability in general

2017-04-23 Thread Christian Balzer
ses? It's clearly something more involved than "fill up one and then fill up the next" or we would see 16k on the old one and a few on the new one. Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Ra

Re: System load spike on dovecot reload

2017-04-21 Thread Christian Balzer
possible with dovecot or does it make sense to > implement that in the future versions? > Run a dovecot proxy (if you have single box with all these users on it, Mr. Murphy would like a word with you) and set "login_proxy_max_disconnect_delay" to something that suits you. Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

Re: IMAP hibernate and scalability in general

2017-04-11 Thread Christian Balzer
stallations hitting CPU limits in > proxies. The problem so far has always been related to getting enough > outgoing sockets without errors, which is a server-wide problem. 2.2.29 has > one tweak that hopefully helps with that. > Which would be? The delayed connection bit? A

Re: IMAP hibernate and scalability in general

2017-04-06 Thread Christian Balzer
MAP sessions per node. Or in other words, less than 1 core total typically. > > Should I be able to handle a much higher client_limit for imap-login and > > pop3-login than 20? > > Yeah. > The above is with a 4k client_limit, I'm definitely going to crank that up to 16k when the opportunity arise (quite disruptive on a proxy...). Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

Re: IMAP hibernate and scalability in general

2017-04-06 Thread Christian Balzer
On Thu, 6 Apr 2017 13:10:03 +0300 Timo Sirainen wrote: > On 6 Apr 2017, at 9.56, Christian Balzer wrote: > > > >> For no particular reason besides wanting to start conservatively, we've got > >> client_limit set to 50 on the hibernate procs (with 1100 total hi

Re: [BUG] client state / Message count mismatch with imap-hibernate and mixed POP3/IMAP access

2017-04-06 Thread Christian Balzer
Hello Aki, Timo, according to git this fix should be in 2.2.27, which I'm running, so I guess this isn't it or something else is missing. See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859700 Regards, Christian On Thu, 6 Apr 2017 15:37:33 +0900 Christian Balzer wrote

Re: IMAP hibernate and scalability in general

2017-04-05 Thread Christian Balzer
t 50 would be a tad too conservative for our purposes here. I'll keep an eye on it and see how it goes, first checkpoint would be at 1k hibernated sessions. ^_^ Christian > On Wed, Apr 5, 2017 at 11:17 PM, Aki Tuomi wrote: > > > > > > > On 06.04.2017 06:15, Christian

Re: [BUG] client state / Message count mismatch with imap-hibernate and mixed POP3/IMAP access

2017-04-05 Thread Christian Balzer
Hello, On Thu, 6 Apr 2017 09:24:23 +0300 Aki Tuomi wrote: > On 06.04.2017 07:02, Christian Balzer wrote: > > > > Hello, > > > > this is on Debian Jessie box, dovecot 2.2.27 from backports, > > imap-hibernate obviously enabled. > > > > I've been

[BUG] client state / Message count mismatch with imap-hibernate and mixed POP3/IMAP access

2017-04-05 Thread Christian Balzer
session (<2jBV+HRM1Pbc9w8u>) fell over and terminated, resulting in the client to start up a new session. If so and with no false data/state transmitted to the client it would be not ideal, but not a critical problem either. Would be delighted if Aki or Timo could comment on this. If you ne

IMAP hibernate and scalability in general

2017-04-05 Thread Christian Balzer
spawning proper processes from imap-hibernate should be just as reduced as for the dovecot master, correct? I'll keep reporting our experiences here, that is if something blows up spectacularly. ^o^ Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.c

Re: Scaling to 10 Million IMAP sessions on a single server

2017-02-21 Thread Christian Balzer
the IMAP server to manage a pool of > workers instead of requiring a process per active session, would allow bigger > scale up and could save large sites a lot of money. > > Is this a good idea? Or, am I missing something? > > Kevin -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

Re: dovecot config for 1500 simultaneous connection

2017-02-14 Thread Christian Balzer
.69 mysqld --- tuning-primer: INNODB STATUS Current InnoDB index space = 49 M Current InnoDB data space = 109 M Current InnoDB buffer pool free = 98 % Current innodb_buffer_pool_size = 8.00 G Depending on how much space your innodb indexes take up it may be safe to increase this value to up

Re: dovecot config for 1500 simultaneous connection

2017-02-13 Thread Christian Balzer
you're missing the real difference here, the number of HDDs. With 4 of them in the RAID10 they will be twice as fast as the 2 disk RAID1. This can be tweaked even further with the various RAID 10 layout options, "man md". > the question is will there be huge performance difference b

Re: dovecot config for 1500 simultaneous connection

2017-02-12 Thread Christian Balzer
ake proxies more supportive for this though. Christian > > On Feb 12, 2017, at 1:58 AM, Christian Balzer wrote: > > > > > > Hello, > > > > On Fri, 10 Feb 2017 14:50:03 -0500 KT Walrus wrote: > > > >>> 1. 256GB of real RAM, swap is for chums

Re: dovecot config for 1500 simultaneous connection

2017-02-11 Thread Christian Balzer
er to be tricky. Lastly, when I asked about 500k sessions per server here not so long ago, ( http://www.dovecot.org/list/dovecot/2016-November/106284.html ) Timo mentioned that he's not aware of anybody doing more than 50k per server, something I got licked already and definitely will go to 100k

Re: dovecot config for 1500 simultaneous connection

2017-02-10 Thread Christian Balzer
958, secured, session= Feb 11 14:05:18 mbx09 dovecot: pop3(redacted): Disconnected: Logged out top=0/0, retr=0/0, del=0/6188, size=103540794 session= --- This is on a server that's bored stiff when it comes to CPU usage or I/O utilization (pure SSD). All that twiddling of thumbs up there is p

Re: dovecot config for 1500 simultaneous connection

2017-02-10 Thread Christian Balzer
1879548 1704506408 > > Rather meaningless w/o knowning which drive is which. Also an "iostat -x" oneshot summary and a few samples of when the machine is busy would be vastly more informative. atop is a good tool (when not running with 20k+ processes) to give you an idea about bottlen

Re: dovecot config for 1500 simultaneous connection

2017-02-10 Thread Christian Balzer
. My current goal is to have 100k capable servers that work well, 200k in a failover scenario, but that won't be particular enjoyable. Christian > > On Feb 10, 2017, at 3:58 AM, Christian Balzer wrote: > > > > On Fri, 10 Feb 2017 01:13:20 +0530 Rajesh M wrote: > >

Re: dovecot config for 1500 simultaneous connection

2017-02-10 Thread Christian Balzer
ss (spawning mail processes) The later is a single-threaded process, so it will benefit from a faster CPU core. It can be dramatically improved by enabling process re-usage, see: http://wiki.dovecot.org/PerformanceTuning However that also means more memory usage. Christian > > thank

Re: auth client limit versus service count of mail processes

2016-11-29 Thread Christian Balzer
On Tue, 29 Nov 2016 14:30:37 +0200 Timo Sirainen wrote: > On 29 Nov 2016, at 2.57, Christian Balzer wrote: > > > > service imap { > > # Most of the memory goes to mmap()ing files. You may need to increase this > > # limit if you have huge mailboxes. > >

auth client limit versus service count of mail processes

2016-11-28 Thread Christian Balzer
>1? 2. Any way to get the process recycling for IMAP going w/o setting the fd limit to a ridiculous amount? Thanks, Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

Re: Reporting on CephFS being ready to use with Dovecot

2016-08-17 Thread Christian Balzer
ce. There's another aspect of Ceph that may be of interest with Dovecot, using the object storage interface. However that's not supporting native Ceph interfaces and by its very nature also is slowish, but has nice scalability. Regards, Christian > Good luck! > > Best, > Daniel Colchete > > [1] http://docs.ceph.com/docs/hammer/dev/differences-from-posix/ > -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

Re: "Plaintext authentication disallowed on non-secure (SSL/TLS) connections" despite correct configuration to allow this

2016-08-02 Thread Christian Balzer
ork all is working now as expected. Christian On Tue, 2 Aug 2016 16:02:34 +0900 Christian Balzer wrote: > > Hello, > > this is basically a repeat of this query from last year, which > unfortunately got a deafening silence for replies: > --- > http://dovecot.org/pipermai

"Plaintext authentication disallowed on non-secure (SSL/TLS) connections" despite correct configuration to allow this

2016-08-02 Thread Christian Balzer
t help and setting trusted networks only changes the last bit to have "secured" appended but still fails the same otherwise. I really need 2.2.x to behave the same way as before and documented. Any ideas and feedback would be most welcome. Regards, Christian -- Chr

Re: Scalability with high density servers and proxies, TCP port limits

2015-07-07 Thread Christian Balzer
On Fri, 3 Jul 2015 14:29:55 +0900 Christian Balzer wrote: > On Fri, 03 Jul 2015 07:05:43 +0200 Urban Loesch wrote: > > > Hi, > > > > Am 03.07.2015 um 05:14 schrieb Christian Balzer: > > > > > > > > 2. Here is where the fun starts. > > >

Re: Scalability with high density servers and proxies, TCP port limits

2015-07-02 Thread Christian Balzer
On Fri, 03 Jul 2015 07:05:43 +0200 Urban Loesch wrote: > Hi, > > Am 03.07.2015 um 05:14 schrieb Christian Balzer: > > > > > 2. Here is where the fun starts. > > Each IMAP session that gets proxied to the real mailbox server needs a > > port for the outg

Scalability with high density servers and proxies, TCP port limits

2015-07-02 Thread Christian Balzer
something obvious? How many concurrent connections do you (hello Timo) think dovecot in proxy mode can handle? High performance mode of course in this case. I'm interested in internal limitations, assume that CPU and RAM are amply supplied. Any and all feedback is appreciated. Regards, Christia

[Dovecot] Slow DNS warnings (proxy/auth)

2013-04-26 Thread Christian Balzer
e handle hungry. Memory wise it's about 35% bigger than perdition and that's not subjective at all. ^o^ About one MB per proxy process/connection for dovecot in my case. Caveat emptor. ^o^ Regards, Christian -- Christian BalzerNetwork/Systems Engineer ch..

Re: [Dovecot] Proxying, pertinent values and features, SNI

2013-04-08 Thread Christian Balzer
On Thu, 4 Apr 2013 22:21:43 +0300 Timo Sirainen wrote: > On 3.4.2013, at 10.59, Christian Balzer wrote: > > > I'm looking into deploying dovecot as a proxy, currently using > > perdition. Have been using dovecot on the actual servers for years, > > nearly a decade.

Re: [Dovecot] Proxying, pertinent values and features, SNI

2013-04-03 Thread Christian Balzer
for all the others based on the IP address they connected to. If everybody can be taught to use only TLS (not IMAPS/POP3S) and all the clients do support SNI, we can do away with the dedicated IP addresses. Might even happen before the heat death of the universe. ^o^ Regards, Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Fusion Communications http://www.gol.com/

[Dovecot] Proxying, pertinent values and features, SNI

2013-04-03 Thread Christian Balzer
ent bugs (nah, those don't exist ^o^) every client should get an appropriate response for TLS. Has anybody done a setup like that already? Regards, Christian -- Christian BalzerNetwork/Systems Engineer ch...@gol.com Global OnLine Japan/Fusion Communications http://www.gol.com/

Re: [Dovecot] rule of thumb for indexing overhead

2007-08-29 Thread Christian Balzer
ystems are plenty fast and any delay by having to (re)build the indexes is hardly noticeable. But if you have a system with less reserves, users that access mail very infrequently but get plenty of mail (so indexing at access time will be an involved process) and no mass mail spikes, dovecot LDA starts t

Re: [Dovecot] rule of thumb for indexing overhead

2007-08-29 Thread Christian Balzer
TP time. Since at least with exim local delivery happens in a separate stage AFTER SMTP has been successfully completed.Now having consistent errors, logs and configurations for all mail delivery stages is something that might you want to stick with your MTA from the edge to the mailbox. Regards, Ch

Re: [Dovecot] Dovecot strong or not for a big Webmail architecture

2007-08-02 Thread Christian Balzer
, the network towards it would be saturated a long time before those 40 Dovecot servers would run out of steam CPU wise. Regards, Christian -- Christian BalzerNetwork/Systems EngineerNOC [EMAIL PROTECTED] Global OnLine Japan/Fusion Network Services http://www.gol.com/

Re: [Dovecot] Mark E-Mail as read

2007-07-05 Thread Christian Balzer
; is # mostly intended to reduce disk I/O. With maildir it doesn't move > > files # from new/ to cur/, with mbox it doesn't write Status-header. > > #pop3_no_flag_updates = no > > > > > The "leaving on the server" bit is a CLIENT configuration i

Re: [Dovecot] Leaky dovecot-auth ?

2007-07-02 Thread Christian Balzer
into a security maintained Debian package... (looks around for the official package masters and backports maintainers) Am I correct in assuming that this code did not change since 0.99, read that the leak I saw for the last 4 years was the same thing? ;) Regards, Christian -- Christian Balzer

Re: [Dovecot] Leaky dovecot-auth ?

2007-07-02 Thread Christian Balzer
On Mon, 02 Jul 2007 17:37:05 +0300 Timo Sirainen <[EMAIL PROTECTED]> wrote: > On Mon, 2007-07-02 at 15:20 +0900, Christian Balzer wrote: > > Jul 2 14:12:30 engtest03 dovecot: auth(default): pool auth request > > handler: 104 / 4080 bytes Jul 2 14:12:30 engtest03 last mes

Re: [Dovecot] v1.1 max connections per user

2007-07-02 Thread Christian Balzer
h a totally devastating effect as with a per IP one. My 2 yen, Christian -- Christian BalzerNetwork/Systems EngineerNOC [EMAIL PROTECTED] Global OnLine Japan/Fusion Network Services http://www.gol.com/

Re: [Dovecot] Leaky dovecot-auth ?

2007-07-01 Thread Christian Balzer
On Mon, 2 Jul 2007 15:20:14 +0900 Christian Balzer <[EMAIL PROTECTED]> wrote: > Of course now it looks like this is not LDAP related after all. > Well, lemme rephrase that. It looks like the LDAP connection pool is not the culprit. I just re-ran the test with local users (shadow a

Re: [Dovecot] Leaky dovecot-auth ?

2007-07-01 Thread Christian Balzer
On Wed, 27 Jun 2007 23:15:32 +0300 Timo Sirainen <[EMAIL PROTECTED]> wrote: > On Thu, 2007-06-21 at 16:49 +0900, Christian Balzer wrote: > > > You could try > > > http://dovecot.org/patches/debug/mempool-accounting.diff and send > > > USR1 signal to dovecot-

Re: [Dovecot] v1.1 max connections per user

2007-06-30 Thread Christian Balzer
inct clients might render this feature moot here and force us to set it to 30-50) and 2-3 for POP3. While at the same time I'll be praying that 1.5 million logins/day won't cause the tracking code for this to melt or leak memory. ;) Regards, Christian -- Christian BalzerNetwork/

Re: [Dovecot] quota calculating

2007-06-25 Thread Christian Balzer
well has it worked for you? > Again, having to recalculate the quota eventually is part of the specification. If your hardware (I/O) can stand the infrequent recalculations working maildir++ quota requires you are gold. Regards, Christian -- Christian BalzerNetwork/Systems Engineer

Re: [Dovecot] pop3 creates bad index file

2007-06-21 Thread Christian Balzer
another variant of this bug in action: http://www.dovecot.org/list/dovecot/2007-May/022677.html (hurry up Debian package maintainers and bring me 1.0.1 :-p ) Regards, Christian -- Christian BalzerNetwork/Systems EngineerNOC [EMAIL PROTECTED] Global OnLine Jap

Re: [Dovecot] Leaky dovecot-auth ?

2007-06-21 Thread Christian Balzer
On Tue, 19 Jun 2007 14:39:59 +0300 Timo Sirainen <[EMAIL PROTECTED]> wrote: > On Tue, 2007-06-19 at 13:40 +0900, Christian Balzer wrote: > > > 1. How and why would the memory footprint of dovecot-auth grow when > > there is no change in the amount of users in the DB? &g

[Dovecot] Leaky dovecot-auth ?

2007-06-18 Thread Christian Balzer
gards, Christan -- Christian BalzerNetwork/Systems EngineerNOC [EMAIL PROTECTED] Global OnLine Japan/Fusion Network Services http://www.gol.com/

Re: [Dovecot] No auto-conversion of .customflags?

2007-06-12 Thread Christian Balzer
Hello Timo, On Tue, 12 Jun 2007 18:22:13 +0300 Timo Sirainen <[EMAIL PROTECTED]> wrote: > On Tue, 2007-06-12 at 10:50 +0900, Christian Balzer wrote: > > Jun 12 09:48:06 mb11 dovecot: IMAP(username): > > stat(/longandboringpath/username/.customflags/cur) failed: Not a >

[Dovecot] No auto-conversion of .customflags?

2007-06-11 Thread Christian Balzer
blem which probably should be addressed for the upcoming 1.0.1 release. Regards, Christian -- Christian BalzerNetwork/Systems EngineerNOC [EMAIL PROTECTED] Global OnLine Japan/Fusion Network Services http://www.gol.com/

Re: [Dovecot] Replication plans

2007-05-17 Thread Christian Balzer
don't need global locking because > they're not changing anything. Except \Recent flag updates.. > We have multiple ACTIVE clients accessing the same mailbox all the time. Company role accounts love that kind of setup. ^_^ Regards, Christian -- Christian BalzerNetwork/Systems EngineerNOC [EMAIL PROTECTED] Global OnLine Japan/Fusion Network Services http://www.gol.com/