Re: How to block a dictionary attack

2010-04-12 Thread Vladimir Klejch
Hi i use in this way fail2ban (http://www.fail2ban.org/). and not only for imap ... fail2ban is confugurable for other net services too. Kleo On Mon, 12 Apr 2010, ram wrote: I am seeing this pattern now very often. Every weekend someone tries to

user_deny.db, very high load and Apple-Spotlight

2010-04-12 Thread Mark Heisterkamp
Hi, we graded up to cyrus 2.3.16 a few weeks ago and since then the load average showed values from 200 to 300 a few times per day. The server has 16 cores, 64GB RAM an is attached to a SAN. This machine is quite powerfull. It serves about 5000 mailboxes. First we touched user_deny.db to

Re: How to block a dictionary attack

2010-04-12 Thread Eric Knudstrup
ram wrote: I am seeing this pattern now very often. Every weekend someone tries to gain unauthorized access to the my imap servers by trying random username / passwords Yesterday by afternoon someone had tried half a million times on my servers from 62.141.37.141. I have written to the

how to debug what happens inside mailboxes

2010-04-12 Thread Martin Kraus
Hello. I'm using cyrus 2.3.14 on a mailserver and a few users are complaining, that sometimes a message gets deleted from the mailbox after reading it. They are using some sort of outlook. Users are using imap to connect to their mailboxes. Is there a way to debug imap communication between

Re: how to debug what happens inside mailboxes

2010-04-12 Thread Patrick Boutilier
On 04/12/2010 10:05 AM, Martin Kraus wrote: Hello. I'm using cyrus 2.3.14 on a mailserver and a few users are complaining, that sometimes a message gets deleted from the mailbox after reading it. They are using some sort of outlook. Users are using imap to connect to their mailboxes. Is there

Re: how to debug what happens inside mailboxes

2010-04-12 Thread Martin Kraus
On Mon, Apr 12, 2010 at 10:12:13AM -0300, Patrick Boutilier wrote: On 04/12/2010 10:05 AM, Martin Kraus wrote: Hello. I'm using cyrus 2.3.14 on a mailserver and a few users are complaining, that sometimes a message gets deleted from the mailbox after reading it. They are using some sort

Re: how to debug what happens inside mailboxes

2010-04-12 Thread Adam Tauno Williams
On Mon, 2010-04-12 at 15:32 +0200, Martin Kraus wrote: On Mon, Apr 12, 2010 at 10:12:13AM -0300, Patrick Boutilier wrote: On 04/12/2010 10:05 AM, Martin Kraus wrote: Hello. I'm using cyrus 2.3.14 on a mailserver and a few users are complaining, that sometimes a message gets deleted

Re: user_deny.db, very high load and Apple-Spotlight

2010-04-12 Thread Joseph Brennan
Mark Heisterkamp heisterk...@rrzn.uni-hannover.de wrote: Kenneth Murchison stated in some mail on this list that user_deny.db is used once per login, that's definitely not true, it is used every time the client 'uses' an IMAP-folder and that can be pretty often! Some clients open a new

Re: how to debug what happens inside mailboxes

2010-04-12 Thread Dan White
On 12/04/10 15:32 +0200, Martin Kraus wrote: On Mon, Apr 12, 2010 at 10:12:13AM -0300, Patrick Boutilier wrote: Use telemetry: http://markmail.org/message/4kigyucxzlrn6lc6 That is exactly what I need. Thanks. Is there some sort of documentation for such features in cyrus? I can't seem to find

Re: how to debug what happens inside mailboxes

2010-04-12 Thread Robert Mueller
That is exactly what I need. Thanks. Is there some sort of documentation for such features in cyrus? I can't seem to find anything beyond basic setup and what is in manual pages. Stuff like annotations (through which I managed to delete 30GB of emails), global sieve skripts, snmp

Re: sync_client segmentation fault when using TLS

2010-04-12 Thread Wesley Craig
On 08 Apr 2010, at 16:32, Matt Selsky wrote: Can you add this patch to bugzilla? Is this the same as: https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3174 My patch for that is below. :wes sync_client-tls-capability-response.diff Description: Binary data Cyrus Home Page: