Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread Stuart Henderson
On 2022-05-24, Hippo Man wrote: > * Hacker makes numerous login attempts one after the other with various > passwords, and without disconnecting in between attempts. I've seen 10 and > more of these repeated attempts rapidly during a single imap or pop3 > connection. "numerous" and "rapidly" soun

Re: Panic: file userdb-blocking with Dovecot 2.3.19

2022-05-25 Thread Ralf Becker
Hi Niklas, I reported the same error in the "Dovecot v2.3.19 released" thread and Aki responded with: > Thank you for reporting this issue. I can reproduce it locally, and we'll take a look at it. So let's hope the best it get fixed for the next release. Ralf Am 24.05.22 um 16:00 schrieb

Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
iptables (linux) & pf firewall (freebsd) do drop the packets immediately as the tables are updated. I know this from experience as I use freebsd for the mail system's and my asterisk voip server use linux At the end of the day the logging has to drive the updates, the only way to protect

Re: Duplicate messages if message is moved when using dsync

2022-05-25 Thread Thom Pol
Hi, Thanks for your reply! The dsync is triggered on IMAP/POP3/LDA/LMTP activity. See my config dump from the first email. I'm wondering if my config is not OK so it causes dsync to sync twice? you need / preferably use a database for your user auth I already do this. run the command dov

Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread Hippo Man
Thank you again for your responses! > iptables (linux) & pf firewall (freebsd) do drop the packets immediately > as the tables are updated. In my case, that is not occurring. After issuing the iptables DROP command, the client can continue to send more and more login attempts. Only when the clien

Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread dovecot
> On 05-25-2022 11:28 am, Hippo Man wrote: > In my case, that is not occurring. After issuing the iptables DROP command, > the client can continue to send more and more login attempts. > Only when the client disconnects does the block of the socket seem to work > for that IP address. I continue

solr-jetty package in Debian 11 bullseye

2022-05-25 Thread John Gateley
Hello, I am in the process of upgrading the OS on my mailserver, currently Debian 9, to Debian 11. The solr-jetty package does not appear to exist in Debian 11. Does anyone know where it is? Thanks John

Re: solr-jetty package in Debian 11 bullseye

2022-05-25 Thread Shawn Heisey
On 5/25/22 13:30, John Gateley wrote: I am in the process of upgrading the OS on my mailserver, currently Debian 9, to Debian 11. The solr-jetty package does not appear to exist in Debian 11. The Solr package that was included in Debian and derivatives was REALLY ancient -- Solr 3.6.  Looks

Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread Joseph Tam
On Tue, 24 May 2022, Hippo Man wrote: Late to this party. * Hacker makes numerous login attempts one after the other with various passwords, and without disconnecting in between attempts. I've seen 10 and more of these repeated attempts rapidly during a single imap or pop3 connection. Maybe t

Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread Joseph Tam
On Wed, 25 May 2022, Hippo Man wrote: iptables (linux) & pf firewall (freebsd) do drop the packets immediately as the tables are updated. In my case, that is not occurring. After issuing the iptables DROP command, the client can continue to send more and more login attempts. Only when the clie

Re: Force TCP socket disconnect on imap login failure?

2022-05-25 Thread Hippo Man
Thank you very much! I didn't know about auth_policy, and I can see that an auth_policy server would be ideal for me. I could transfer a lot of the logic to that server and dispense with most (and maybe even all) of my logfile monitoring. I'm already using RBL with postfix, and it will probably