Re: [courier-users] RBL Check - When?

2007-10-22 Thread Alessandro Vesely
Gordan Bobic wrote: Leigh S. Jones, KR6X wrote: No one has mentioned that it's necessary to wait until the possible spammer identifies his target to know whether the target has him whitelisted. Gordan wrote: Whitelists aren't really practicaly on big setups. You need to block a lot before

[courier-users] Saturation DDoS

2007-10-22 Thread Zenon Panoussis
For weeks on end now I am being subjected to what I could call a reverse spam DDoS attack for lack of better term. Some asshole is sending out zillions of messages to non-existent users at legitimate domains, using clearly non-existent sender addresses @myhosteddomain. It seems he is specifically

Re: [courier-users] authldap against ADS+SFU 3.5

2007-10-22 Thread Arturo 'Buanzo' Busleiman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Larry Moore wrote: I've been testing against AD with the following config. LDAP_URIldap://ad-server.domain.local:3268 LDAP_PROTOCOL_VERSION 3 [...] LDAP_DEREF never LDAP_TLS0 Which seems to

Re: [courier-users] authldap against ADS+SFU 3.5

2007-10-22 Thread Enda Cronnolly
Arturo 'Buanzo' Busleiman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Larry Moore wrote: I've been testing against AD with the following config. LDAP_URIldap://ad-server.domain.local:3268 LDAP_PROTOCOL_VERSION 3 [...] LDAP_DEREF never LDAP_TLS

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Enda Cronnolly
Zenon Panoussis wrote: status=deferred (delivery temporarily suspended: connect to [my courier]: Connection refused) I would hazard a guess that you have either ran out of pre-configured available threads for esmtpd to listen on (in which case increasing the limits will help) or your system

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Leigh S. Jones
This is happenning to us all. It's not a DDoS attack, just a spammer spoofing addresses at your domain. Zenon Panoussis writes: For weeks on end now I am being subjected to what I could call a reverse spam DDoS attack for lack of better term. Some asshole is

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Zenon Panoussis
Leigh S. Jones wrote: This is happenning to us all. It's not a DDoS attack, just a spammer spoofing addresses at your domain. Aha, thanks, that's good to know. Still, being a random target isn't any better than being a selected one. The problem remains: courier shouldn't choke, but does.

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Gordon Messmer
Zenon Panoussis wrote: Enda Cronnolly wrote: I would hazard a guess that you have either ran out of pre-configured available threads for esmtpd to listen on (in which case increasing the limits will help) or your system has run out of available resources to provide esmtpd with new

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Zenon Panoussis
Gordon Messmer wrote: ... when mail servers connect to courier's smtpd and send RCPT commands with invalid users (or any other error), smtpd starts tarpitting them -- after each failed command, it waits for an increasingly long period of time before it replies and reads more commands.

[courier-users] Courier-Imap Problem with Thunderbird?

2007-10-22 Thread debian
Hello ! I'm setting up an email server on debian etch using Postfix, Maildrop and Courier-Imap with virtual user in a mysql database. It works fine but I have a problem with thunderbird clients. When there is a new mail in INBOX it blinks like if it was constantly arriving, consequently the

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Gordon Messmer
Zenon Panoussis wrote: In this case this feature turns against me and everybody else except the spammer. What is hitting me is more or less innocent servers bouncing spam (not 100% innocent because they shouldn't have accepted that spam in the first place, but misconfigured != malicious). So

Re: [courier-users] authldap against ADS+SFU 3.5

2007-10-22 Thread Arturo 'Buanzo' Busleiman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Enda Cronnolly wrote: If you use authenticated binds the LDAP / AD server will verify the passwords and courier does not need to query those fields from the schema. In this scenario, courier will not be able to change the password either

Re: [courier-users] Courier-Imap Problem with Thunderbird?

2007-10-22 Thread Sergiy Zhuk
hi On Mon, 22 Oct 2007 [EMAIL PROTECTED] wrote: I set IMAP_ENHANCEDIDLE=1 in /etc/courier/imapd (i.e. imap server inform Do you realize this is in *seconds* and not in minutes ? Essentially you're making courier check all folders for new messages every second. This should put a significant

Re: [courier-users] Saturation DDoS

2007-10-22 Thread Sam Varshavchik
Zenon Panoussis writes: For weeks on end now I am being subjected to what I could call a reverse spam DDoS attack for lack of better term. Some asshole is sending out zillions of messages to non-existent users at legitimate domains, using clearly non-existent sender addresses @myhosteddomain.

Re: [courier-users] authldap against ADS+SFU 3.5

2007-10-22 Thread Larry Moore
Arturo 'Buanzo' Busleiman wrote: I see there is no LDAP_CLEARPW or LDAP_CRYPTPW option set. Any comments on that, Larry? This option removes the neccesity to access these fields. LDAP_AUTHBIND 1 BTW, my account for binding with, [EMAIL PROTECTED] only has 'Domain Guest' group

Re: [courier-users] authldap against ADS+SFU 3.5

2007-10-22 Thread Larry Moore
Enda Cronnolly wrote: Which seems to work. Which POSIX fields did you encounter problems with? I see there is no LDAP_CLEARPW or LDAP_CRYPTPW option set. Any comments on that, Larry? If you use authenticated binds the LDAP / AD server will verify the passwords and courier does not need

Re: [courier-users] Courier-Imap Problem with Thunderbird?

2007-10-22 Thread Jerry Amundson
On 10/22/07, Sergiy Zhuk [EMAIL PROTECTED] wrote: hi On Mon, 22 Oct 2007 [EMAIL PROTECTED] wrote: I set IMAP_ENHANCEDIDLE=1 in /etc/courier/imapd (i.e. imap server inform Do you realize this is in *seconds* and not in minutes ? Umm, it's an on/off flag. ##NAME: IMAP_ENHANCEDIDLE:0 # #

Re: [courier-users] Courier-Imap Problem with Thunderbird?

2007-10-22 Thread Sergiy Zhuk
hi On Mon, 22 Oct 2007, Jerry Amundson wrote: Do you realize this is in *seconds* and not in minutes ? Umm, it's an on/off flag. ##NAME: IMAP_ENHANCEDIDLE:0 I meant IMAP_IDLE_TIMEOUT, doh... I suspect it's set too low in the config. -- rgds, serge