Re: is dovecot vulnerable to this kind of attack?

2016-01-27 Thread Louis Kowolowski
> > On Jan 27, 2016, at 1:43 PM, Alexander Dalloz wrote: > > Am 27.01.2016 um 21:10 schrieb Louis Kowolowski: >> I found an interesting email that got caught in my spam quarantine. I’m >> wondering if dovecot is vulnerable to this kind of code execution (I’m aware >> that

Re: ot: data consumption IMAP vs POP

2016-01-27 Thread Charles Marcus
On 1/27/2016 9:32 AM, Steffen Kaiser wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Wed, 27 Jan 2016, Charles Marcus wrote: > >> On 1/27/2016 1:30 AM, Steffen Kaiser wrote: >>> Sending bandwitdh can be reduced by

Maildir to mdbox conersion size issue

2016-01-27 Thread Petr Bousek
Hello, I have issue with dovecot 2.2.13 I want to change all Maildirs to mdbox format and I do it per partes, so I change mail_location for user (in sql), than I use doveadm sync -u user path_to_maildir and everything works mostly fine. But now I found that when I migrate quite huge Maildir

is dovecot vulnerable to this kind of attack?

2016-01-27 Thread Louis Kowolowski
I found an interesting email that got caught in my spam quarantine. I’m wondering if dovecot is vulnerable to this kind of code execution (I’m aware that other components could be vulnerable, but this question is specifically targeting dovecot). The idea is to insert shell commands into

Re: is dovecot vulnerable to this kind of attack?

2016-01-27 Thread Alexander Dalloz
Am 27.01.2016 um 21:10 schrieb Louis Kowolowski: I found an interesting email that got caught in my spam quarantine. I’m wondering if dovecot is vulnerable to this kind of code execution (I’m aware that other components could be vulnerable, but this question is specifically targeting

Re: Disable Client Certificate Authentication for Unencrypted Connections?

2016-01-27 Thread Axel Luttgens
> Le 25 janv. 2016 à 13:02, Haravikk a écrit : > > […] > > Since dovecot is also providing authentication to postfix I’ve already > created an exemption from the client certificate requirement for SMTP > connections by doing the following: > > protocol !smtp { > ssl_ca =

Re: ot: data consumption IMAP vs POP

2016-01-27 Thread Sami Ketola
On 27/01/16 04:35, voy...@sbt.net.au wrote: I have a domain with about 50 mailboxes, server is located here in AUS but most of the users are on a LAN is SEAsia location. They were using POP (with Thunderbird), I suggested then can use IMAP instead, so they did. now they are asking; "Looks

Re: ot: data consumption IMAP vs POP

2016-01-27 Thread Daniel Tröder
On 01/27/2016 03:35 AM, voy...@sbt.net.au wrote: > I have a domain with about 50 mailboxes, server is located here in AUS but > most of the users are on a LAN is SEAsia location. They were using POP > (with Thunderbird), I suggested then can use IMAP instead, so they did. > > now they are asking;

Re: ot: data consumption IMAP vs POP

2016-01-27 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Jan 2016, Charles Marcus wrote: On 1/27/2016 1:30 AM, Steffen Kaiser wrote: Sending bandwitdh can be reduced by using BCC instead of the IMAP append to the sent mailbox. Can you elaborate on this? I

Re: ot: data consumption IMAP vs POP

2016-01-27 Thread Håkon Alstadheim
Den 27. jan. 2016 07:30, skrev Steffen Kaiser: > On Wed, 27 Jan 2016, voy...@sbt.net.au wrote: > > > I have a domain with about 50 mailboxes, server is located here in > AUS but > > most of the users are on a LAN is SEAsia location. They were using POP > > (with Thunderbird), I suggested then can

Can you "doveadm search" with mailbox location instead of a user (-u option)?

2016-01-27 Thread Christian Rohmann
Hey dovecot-users! doveadm import offers to use i.e. a maildir as source and then import into a users mailbox referenced via "-u" option. If one wants to import only certain emails from the source a search-query can be given as well. I was wondering if doveadm search also does offer to search a

Re: ot: data consumption IMAP vs POP

2016-01-27 Thread Charles Marcus
On 1/27/2016 1:30 AM, Steffen Kaiser wrote: > Sending bandwitdh can be reduced by using BCC instead of the IMAP append > to the sent mailbox. Hi Steffen, Can you elaborate on this? I would have thought that the IMAP Append command would *save* bandwidth (as