Re: Crashes with tracebacks

2015-01-05 Thread Teemu Huovila
On 12/18/2014 02:23 PM, Timothe Litt wrote:
 Crashes, redux.  I hope I have provided all the information required for
 a solution.  Many thanks in advance for having a look.
 
 I have 71 core files for a user, that all happened in the space of about
 6 hours.  It appears that mail delivered to 'Junk E-mail' is being
 accessed.  I suspect they're all the same issue.  I saw the same syslog
 entry a while back; did a resync  enabled process dumps.  Naturally, it
 went away -- until this cluster of crashes.
 
 File system is ext3.  It is NFS mounted by other machines, but only the
 local machine should be touching the mail directories.  The user does
 not have an interactive login - it's an e-mail only account.
 
 This user's IMAP client is AppleMail.  The delivery agent is procmail;
 Junk is detected by spamassassin; clamav is also present.
The patches mentioned in http://markmail.org/message/xqu3yr52c6hjxqk2 might fix 
your issue.

You could also consider switching over to LMTP or dovecot-lda as the mail 
delivery method.

br,
Teemu Huovila


'ssl_cipher_list' setting

2015-01-05 Thread Yoshito Takeuchi
Hi, I am Yoshi, Japanese.

I used

FreeBSD 10.1
Dovecot 2.2.15

I want pop3s, so I made

/usr/local/etc/dovecot/local.conf

ssl = yes
ssl_cert = /usr/local/etc/dovecot/server.pem
ssl_key = /usr/local/etc/dovecot/server.key
ssl_ca = /usr/local/etc/dovecot/ca.pem
ssl_protocols = !SSLv2 !SSLv3
ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLV3:!EXP:!aNULL:!RC4

It's work fine.
But, change

ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:!RC4

( SSLV3 - SSLv3 )

I did trouble.

/var/log/maillog

Jan  6 05:41:53 example dovecot: pop3-login: Disconnected (no auth attempts in 0
secs): user=, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS
handshaking, session=5e9
zuO0LVwB+PO8D

Is this bug ? or I did miss setting ?

Thank you for reading.

Yoshi


Re: 'ssl_cipher_list' setting

2015-01-05 Thread Reindl Harald


Am 05.01.2015 um 21:53 schrieb Yoshito Takeuchi:

I used

FreeBSD 10.1
Dovecot 2.2.15

I want pop3s, so I made

/usr/local/etc/dovecot/local.conf

ssl = yes
ssl_cert = /usr/local/etc/dovecot/server.pem
ssl_key = /usr/local/etc/dovecot/server.key
ssl_ca = /usr/local/etc/dovecot/ca.pem
ssl_protocols = !SSLv2 !SSLv3
ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLV3:!EXP:!aNULL:!RC4

It's work fine.
But, change

ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:!RC4

( SSLV3 - SSLv3 )

I did trouble

/var/log/maillog

Jan  6 05:41:53 example dovecot: pop3-login: Disconnected (no auth attempts in 0
secs): user=, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS
handshaking, session=5e9
zuO0LVwB+PO8D

Is this bug ? or I did miss setting?


!SSLV3 was wrong and not recognized
!SSLv3 is recognized but bullshit since you want to disable SSLv3 but 
not all ciphers which are still valid for newer TLS versions


you do that already correctly with ssl_protocols



signature.asc
Description: OpenPGP digital signature