Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-20 Thread Adi Pircalabu
On 21/03/17 07:03, Joseph Tam wrote: Sami Ketola writes: Can anyone with Solr installed confirm/refute this: does installing Solr keep iOS clients from roofing the connection count? I doubt it, but since IMAP SEARCH goes all the way down to the backends mail_max_userip_connections can be use

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-20 Thread Joseph Tam
Sami Ketola writes: Can anyone with Solr installed confirm/refute this: does installing Solr keep iOS clients from roofing the connection count? I doubt it, but since IMAP SEARCH goes all the way down to the backends mail_max_userip_connections can be used to limit the number of connections.

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-20 Thread Sami Ketola
> On 16 Mar 2017, at 22.23, Joseph Tam wrote: > > Can anyone with Solr installed confirm/refute this: does installing > Solr keep iOS clients from roofing the connection count? I doubt it, but since IMAP SEARCH goes all the way down to the backends mail_max_userip_connections can be used to

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-16 Thread Joseph Tam
Adi Pircalabu writes: For us it is, we're periodically getting hammered by iOS devices that try to open 300+ simultaneous IMAP connections for a single user from the same IP, while the average hovers usually below 50 for the busier mailboxes with many folders. Oh yeah, I've seen this. I think

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-16 Thread Sami Ketola
Hi, It would be quite hard to enforce a limit at the proxy level since the proxies do not share any information. Currently I do not know any way of enforcing a limit at the proxies already. Sami > On 16 Mar 2017, at 7.14, Adi Pircalabu wrote: > > Thanks, > > I thought this might be the case

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-15 Thread Adi Pircalabu
On 16/03/17 11:03, Timo Sirainen wrote: No plans to support enforcing at proxy level. One problem here is that there are no guarantees that the connections even end up in the same proxies, although I guess if your load balancer does IP stickiness that could work well enough. With or withou

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-15 Thread Timo Sirainen
On 16 Mar 2017, at 0.14, Adi Pircalabu wrote: > > I thought this might be the case. Is there any solution to enforce this on > the proxy? If not, will a feature request be considered anytime soon? I see > the proxies as the first line of defense against IMAP "abuse" and I think > it's consiste

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-15 Thread Adi Pircalabu
Thanks, I thought this might be the case. Is there any solution to enforce this on the proxy? If not, will a feature request be considered anytime soon? I see the proxies as the first line of defense against IMAP "abuse" and I think it's consistent having the same configurable option available

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-14 Thread Sami Ketola
Hi, mail_max_userip_connections is only enforced at the backend level. The setting has no effect on proxy. If you want to force the limit then you can only do it in the backend. Sami > On 9 Mar 2017, at 12.05, Adi Pircalabu wrote: > > Quick follow-up: updated the proxies to 2.2.28, but I sti

Re: Dovecot 2.2.27 proxy - enforcing per client IP connection limits

2017-03-08 Thread Adi Pircalabu
Quick follow-up: updated the proxies to 2.2.28, but I still couldn't find a way to limit the inbound IMAP connections per IP & username. I know "mail_max_userip_connections" limit works for the mail stores, but it doesn't seem to have any effect on the proxies. I'm using a mix of Dovecot & Cour