Re: [Dovecot] spf record

2007-11-28 Thread Udo Rader
ditional weight for spam scoring. Some time ago there was a similar discussion on the postfix ML and I had pretty much the same arguments that you had. But as a matter of fact, I got corrected. The major problem with even scoring is that the only things spammers have to do (and they really do it!)

Re: [Dovecot] spf record

2007-11-28 Thread Udo Rader
vent spamming but is quite useful when it comes to prevent phishing. That's why we don't use it even for spam scoring anymore. It is not worth the resources, IMHO again at least :-) - -- Udo Rader http://www.bestsolution.at -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux

Re: [Dovecot] Webmail Recommendation

2008-01-11 Thread Udo Rader
creases the burden on MySQL ... We are also testing the webinterface that eGroupWare [1] provides and are very impressed by its completeness (sieve integration, message filters and much more). [1] http://www.egroupware.org -- Udo Rader bestsolution.at EDV Systemhaus GmbH http://www.bestsolutio

[Dovecot] catching authentication failures with LDAP backend

2008-12-06 Thread Udo Rader
ocket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix ---CUT--- -- Udo Rader, CTO http://www.bestsolution.at

Re: [Dovecot] catching authentication failures with LDAP backend

2008-12-06 Thread Udo Rader
Udo Rader schrieb: Hi, we have recently been hit by a couple of brute force password attacks against dovecot. So what I want to do now is to add dovecot to fail2ban in order to block further attacks. However, I don't seem to be able to find out password verifification failures for our

Re: [Dovecot] catching authentication failures with LDAP backend

2008-12-06 Thread Udo Rader
Udo Rader schrieb: Udo Rader schrieb: Hi, we have recently been hit by a couple of brute force password attacks against dovecot. So what I want to do now is to add dovecot to fail2ban in order to block further attacks. However, I don't seem to be able to find out password verifific

Re: [Dovecot] catching authentication failures with LDAP backend

2008-12-06 Thread Udo Rader
Seth Mattinen schrieb: Udo Rader wrote: Udo Rader schrieb: Hi, we have recently been hit by a couple of brute force password attacks against dovecot. So what I want to do now is to add dovecot to fail2ban in order to block further attacks. However, I don't seem to be able to fin

Re: [Dovecot] !

2008-12-06 Thread Udo Rader
want lots of details, turn on debugging. Yes, that is certainly the case. It is 1.0.15 from debian unstable. -- Udo Rader, CTO http://www.bestsolution.at

Re: [Dovecot] OT: Looking for a robust IMAP client

2008-12-15 Thread Udo Rader
Stewart Dean schrieb: This weekend we had a runaway email endless loop. When it was killed after 18 hours, my inbox had 135,000 messages in it...there were two messages that were being endlessly sent and bounced and I'm on the postmaster alias. Thunderbird was able to do a mass select of one

Re: [Dovecot] Problems with dovecot

2009-01-10 Thread Udo Rader
->eof) Jan 10 17:16:17 Carolyn dovecot: [ID 398108 mail.error] Raw backtrace: what does ldd /opt/Dovecot/libexec/dovecot/imap-login give? -- Udo Rader http://www.bestsolution.at

Re: [Dovecot] Problems with dovecot

2009-01-10 Thread Udo Rader
o.2 => /lib/libm.so.2 libdoor.so.1 => /lib/libdoor.so.1 libuutil.so.1 => /lib/libuutil.so.1 libgen.so.1 => /lib/libgen.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sf

Re: [Dovecot] Problems with dovecot

2009-01-10 Thread Udo Rader
Filip Francis wrote: Udo Rader wrote: Filip Francis wrote: r...@carolyn /opt/Dovecot/etc # ldd /opt/Dovecot/libexec/dovecot/imap-login libssl.so.0.9.7 => /opt/coolstack/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 =>/opt/coolstack/lib/libcrypto.so.0.9.7 libr

Re: [Dovecot] I've moved to US

2009-02-06 Thread Udo Rader
tually been paying for Dovecot features for about 3 years now. Wow, congrats! Looks like a typical 'working is s much more fun than studying' thing :-) -- Udo Rader, CTO http://www.bestsolution.at

Re: [Dovecot] v1.1.11 released

2009-02-08 Thread Udo Rader
il_chroot=/home but the entire point of chrooting is _changing_ the root directory. So it seems quite obvious that you need to strip your homedirs yourself. How else could you otherwise define /home/home/test if you really wanted to do? -- Udo Rader, CTO http://www.bestsolution.at

[Dovecot] dovecot: Fatal: Time just moved backwards by 3909 seconds.

2009-11-30 Thread Udo Rader
st kill myself now. http://wiki.dovecot.org/TimeMovedBackwards --CUT--- So as you see, dovecot successfully logged a message on 14:02 and then complained about the time having shifted 4397 seconds on 14:04 ... Thanks in advance -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

Re: [Dovecot] dovecot: Fatal: Time just moved backwards by 3909 seconds.

2009-11-30 Thread Udo Rader
Charles Marcus wrote: On 11/30/2009, Udo Rader (list...@bestsolution.at) wrote: The virtual guest is Centos 5.4 based with dovecot 1.2.8 (at first we also tried with the original 1.0.7 (?) dovecot shipped with Centos). I wrote "alleged time shift" because there is no timeshift what

Re: [Dovecot] dovecot: Fatal: Time just moved backwards by 3909 seconds.

2009-11-30 Thread Udo Rader
Udo Rader wrote: Charles Marcus wrote: On 11/30/2009, Udo Rader (list...@bestsolution.at) wrote: The virtual guest is Centos 5.4 based with dovecot 1.2.8 (at first we also tried with the original 1.0.7 (?) dovecot shipped with Centos). I wrote "alleged time shift" because t

Re: [Dovecot] dovecot: Fatal: Time just moved backwards by 3909 seconds.

2009-11-30 Thread Udo Rader
Charles Marcus wrote: On 11/30/2009 4:36 PM, Udo Rader wrote: Recent kernels should be able to keep the VM time synced using kvmclock clocksource... So I'll give clocksource=acpi_pm a chance and see how it turns out ... So for the sake of other peoples' nerves also facing th

Re: [Dovecot] Why is direct invocation of dovecot preferred over inet inclusion?

2007-05-15 Thread Udo Rader
s, inetd may be right for you, but as soon as you have to deal with more clients, inetd is simply bad. and about starting ... dovecot like almost any other service can of course also be started automatically without using inetd using the usual init scripts (depending on the unix flavour you are

Re: [Dovecot] Getting rid of the common newbie problems

2007-05-16 Thread Udo Rader
ns as possible (eg. in the wiki), maybe organized as some kind of recipes. In the end most setups boil down to say 4 or 5 basic types, probably differing mostly between authentication settings. I've upgraded our and come clients' dovecot installations multiple times, and to be honest I did not like the extensive documentation provided in the default configuration files. Saying 'I did not like it' does not mean that the information was useless, on the contrary, the amount was just overwhelming ... Sometimes too much information is ... too much :-) Major drawback for sample configurations is that they need to be maintained in order to keep up with the latest and greatest settings. But talking about documentation, what I really miss are manual or info pages for dovecot/dovecot.conf but of course, somebody has to write them ... -- Udo Rader bestsolution.at EDV Systemhaus GmbH http://www.bestsolution.at signature.asc Description: Dies ist ein digital signierter Nachrichtenteil

Re: [Dovecot] Maildir Skeleton

2007-08-07 Thread Udo Rader
unning might cause some mails getting in before your user has been correctly "initialized". -- Udo Rader bestsolution.at EDV Systemhaus GmbH http://www.bestsolution.at signature.asc Description: This is a digitally signed message part

[Dovecot] performance?/connectivity? issues after server upgrade

2007-10-18 Thread Udo Rader
: 432 user: postfix group: postfix Any ideas welcome :-) -- Udo Rader bestsolution.at EDV Systemhaus GmbH http://www.bestsolution.at signature.asc Description: This is a digitally signed message part

Re: [Dovecot] performance?/connectivity? issues after server upgrade

2007-10-19 Thread Udo Rader
. > > > > > Duplex mismatch on the network card? grr, yes!!! Checking the link status of the NIC it showed that indeed duplexing was giving wrong results. Forcing it into the correct mode did not change anything, but finally replacing the card with a new one solved t