Chandran,

From the configuration you sent you have the following setting...

service imap-login {
 .
.
.
  service_count = 1
.
.
.
}

from http://wiki2.dovecot.org/LoginProcess

It should be...

service imap-login {
   service_count = 0
}

For High-performance mode.

And, I would not change any configuration file in /etc/dovecot/conf.d
directory, make all your changes in local.conf

In the above link, here's the High-Performance section:


    High-performance mode

You can enable high-performance mode with:

service imap-login {
  service_count = 0
  #client_limit = $default_client_limit
  #process_min_avail = 0
  #vsz_limit = 64M
}
service pop3-login {
  service_count = 0
}

It works by using a number of long running login processes, each
handling a number of connections. This loses much of the security
benefits of the login process design, because in case of a security hole
(in Dovecot or SSL library) the attacker is now able to see other users
logging in and steal their passwords, read their mails, etc.

  *

    process_min_avail should be set to be at least the number of CPU
    cores in the system, so that all of them will be used.

  * Otherwise new processes are created only once an existing one's
    connection count reaches client_limit
  * Default client_limit * process_limit = 1000*100 = 100k connections
  * vsz_limit should be increased to avoid out of memory errors,
    especially if you're using SSL/TLS.



Eric


On 7/23/2015 1:01 AM, Chandran Manikandan wrote:
> Dear Eric,
> Please find the attached file FYR . please check and help me to
> resolve it.
>
> On Wed, Jul 22, 2015 at 8:21 PM, Eric Broch <[email protected]
> <mailto:[email protected]>> wrote:
>
>
>     Look here  http://wiki2.dovecot.org/LoginProcess
>
>
>     On 7/22/2015 3:56 AM, Chandran Manikandan wrote:
>>     Dear Friends,
>>     I have faced below issues since two weeks to till now. Could
>>     anyone help me to rectify this issue.
>>
>>     Below message retrieve from logs and getting disconnection from
>>     Outlook and other email clients.
>>
>>     Error Message
>>
>>     master: Warning: service(imap-login): process_limit (100)
>>     reached, client connections are being dropped
>>
>>     My local.conf from dovecot folder
>>
>>     protocol imap {
>>       imap_client_workarounds = "delay-newmail"
>>       mail_max_userip_connections = 20
>>        default_process_limit = 300
>>     }
>>
>>     10-master.conf
>>
>>     default_process_limit = 300
>>     default_client_limit = 1000
>>
>>     service imap-login {
>>       inet_listener imap {
>>         # process_limit = 15
>>         # client_limit = 300
>>         #port = 143
>>       }
>>     protocol imap {"process_limit = 300"}
>>
>>     Please check above config. I have modified in dovecot folder but
>>     doesn't reflect the server. Is there anything in toaster issue.
>>     could any one help me to solve it.
>>
>>     My server toaster is dovecot-2.2.7-0.qt.el6.i686
>>     Server is Centos 6.6
>>
>>
>>
>>     -- 
>>     *Thanks,*
>>     *Manikandan.C*
>>     *System Administrator*
>
>
>
>
> -- 
> *Thanks,*
> *Manikandan.C*
> *System Administrator*
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]

Reply via email to