[Dovecot] Corrupted transaction log file / record size too small

2008-09-30 Thread Steven Winikoff
I recently upgradeded dovecot on one of our servers from version 1.0.10 to version 1.1.3. Ever since, we've been seeing occasional errors similar to this sequence (with the username and IP addresses elided): Sep 30 00:09:56 alcor dovecot: pop3-login: Login: [4954], , NNN.NNN.NN.NNN

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Sascha Wilde
Timo Sirainen [EMAIL PROTECTED] writes: Well, I actually started it today since it's needed for replication: http://hg.dovecot.org/dovecot-1.2/rev/6dd0c6755afe Mailboxes can't be listed yet (and I'm not planning on implementing that anytime soon), but if you add the wanted mailboxes to

[Dovecot] dovecot quota messages problem

2008-09-30 Thread costexx
Hi. I have a question about quota messages (dovecot 1.1.3). I'm tryng to use quota messages for moving messages in a new folder when they reach a certin number(1). I made the script which is called when quota_warning condition is met. Then i made a rule to exclude that folder from quota,

[Dovecot] dovecot quota messages

2008-09-30 Thread Cosmin Natea
Hi. I have a question about quota messages (dovecot 1.1.3). I'm trying to use quota messages for moving messages in a new folder when they reach a certain number(1). I made the script which is called when quota_warning condition is met. Then i made a rule to exclude that folder from quota,

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Timo Sirainen
On Tue, 2008-09-30 at 10:46 +0200, Sascha Wilde wrote: namespace shared { separator = / # %%u gets expanded to the remote user. Instead of %%u you can # also use %%n and %%d. prefix = shared/%%u/ location = Maildir:/home/%%u/Maildir:INDEX=~/Maildir/shared/%%u } Sounds

[Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread Amit Thakkar
Hello, I work for an organization that uses a Secure Dovecot server for messaging, and recently we've had to undergo some security screenings for PKI compliance (credit card industry standards). However, the screening returned to us a failure due to the following reason (attributed to our

Re: [Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread John Gray
I *think* you can fix this in your config. ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM Consider yourself lucky you're not using UW. I believe you need to recompile it. Nessus thinks I'm good with the setting above. John Amit Thakkar wrote: Hello, I work for an organization

Re: [Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread Timo Sirainen
BTW. Dovecot v1.1 has by default: ssl_cipher_list = ALL:!LOW:!SSLv2 I'd think that's enough to fix this too. On Tue, 2008-09-30 at 10:23 -0400, John Gray wrote: I *think* you can fix this in your config. ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM Consider yourself lucky

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Sascha Wilde
Timo Sirainen [EMAIL PROTECTED] writes: On Tue, 2008-09-30 at 10:46 +0200, Sascha Wilde wrote: namespace shared { separator = / # %%u gets expanded to the remote user. Instead of %%u you can # also use %%n and %%d. prefix = shared/%%u/ location =

[Dovecot] create folder automatically

2008-09-30 Thread Nicolas Letellier
Hello. I install a sieve rule automatically when a mailbox is created, like: if exists X-Spam-Flag { fileinto Junk; stop; } However, sometimes, this folder does not exist. How create it automatically? Thanks! Regards, -- -Nicolas.

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Timo Sirainen
On Sep 30, 2008, at 6:08 PM, Sascha Wilde wrote: Is there a %%h, too? So that, if we have mail_location = maildir:~ .. Another (more specific) problem in this context: Is is it possible to determine a users home calling an external program like checkpassword? This would be needed in an

Re: [Dovecot] disbale to responded to an unrequested SSL Certificate

2008-09-30 Thread Andre Hübner
Hi List, Hi dovecot-list, just a easy question today ;) Customer did on Server a PCI-Test to test security to fit worldpay requirements. They found a critical risk at pop3s. (and some other things) This is the Textmesage: Family: Remote Shell Access Critical 993/tcp 11875

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Sascha Wilde
Timo Sirainen [EMAIL PROTECTED] writes: On Sep 30, 2008, at 6:08 PM, Sascha Wilde wrote: Is there a %%h, too? So that, if we have mail_location = maildir:~ .. Another (more specific) problem in this context: Is is it possible to determine a users home calling an external program like

Re: [Dovecot] Initial support for shared mailboxes

2008-09-30 Thread Timo Sirainen
On Sep 30, 2008, at 6:48 PM, Sascha Wilde wrote: On Sep 30, 2008, at 6:08 PM, Sascha Wilde wrote: Is there a %%h, too? So that, if we have mail_location = maildir:~ .. Another (more specific) problem in this context: Is is it possible to determine a users home calling an external program

Re: [Dovecot] create folder automatically

2008-09-30 Thread Seth Mattinen
Nicolas Letellier wrote: Hello. I install a sieve rule automatically when a mailbox is created, like: if exists X-Spam-Flag { fileinto Junk; stop; } However, sometimes, this folder does not exist. How create it automatically? It is created automatically (at least on

Re: [Dovecot] create folder automatically

2008-09-30 Thread Eduardo M KALINOWSKI
Seth Mattinen escreveu: Nicolas Letellier wrote: Hello. I install a sieve rule automatically when a mailbox is created, like: if exists X-Spam-Flag { fileinto Junk; stop; } However, sometimes, this folder does not exist. How create it automatically? It is

Re: [Dovecot] PKI Compliance Dovecot Server

2008-09-30 Thread Rick Romero
FYI, Nessus scans are used for PCI Compliance. So if you've got all the plugins, you're good to go for vulnerability checks. IIRC, !SSLv2 was my solution when the SSL thing came up last year for PCI Compliance (previous job). Rick Timo Sirainen wrote: BTW. Dovecot v1.1 has by default:

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Timo Sirainen
On Mon, 2008-09-29 at 10:01 -0700, Seth Mattinen wrote: Timo Sirainen wrote: On Thu, 2008-09-25 at 09:40 -0700, Seth Mattinen wrote: Has anyone (is anyone) working on adding quota support to dovecot's managesieve server? I was thinking about giving it a shot myself and I'd hate to

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Seth Mattinen
Timo Sirainen wrote: Maybe I'm overthinking the problem. There probably won't be more than a few scripts. It's probably simplest if the quota is always just recalculated by lstat()ing the files. Pretty much what I was thinking about doing. Calculate total size of the sieve scripts and compare

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Timo Sirainen
On Tue, 2008-09-30 at 10:47 -0700, Seth Mattinen wrote: Timo Sirainen wrote: Maybe I'm overthinking the problem. There probably won't be more than a few scripts. It's probably simplest if the quota is always just recalculated by lstat()ing the files. Pretty much what I was thinking

Re: [Dovecot] Test environment question

2008-09-30 Thread Stewart Dean
Timo Sirainen wrote: On Mon, 2008-09-22 at 13:04 -0400, Stewart Dean wrote: Sep 22 11:54:13 egg mail:err|error dovecot: IMAP(sdean): posix_fallocate() faile d: Protocol not available See if this helps: http://hg.dovecot.org/dovecot-1.1/rev/ad13463328aa My apologies for not

Re: [Dovecot] Managesieve Quota

2008-09-30 Thread Stephan Bosch
Timo Sirainen wrote: On Tue, 2008-09-30 at 10:47 -0700, Seth Mattinen wrote: Timo Sirainen wrote: Maybe I'm overthinking the problem. There probably won't be more than a few scripts. It's probably simplest if the quota is always just recalculated by lstat()ing the files.

Re: [Dovecot] quota warnings clarification

2008-09-30 Thread Ian B
Well... the main use for Quotas is for rejecting NEW messages at delivery time - not for controlling a static set of mailboxes. Are you saying you didn't even test by sending yourself a test message? -- The way I was testing was by setting the quota warning threshold low like

Re: [Dovecot] disbale to responded to an unrequested SSL Certificate

2008-09-30 Thread Christopher J. Buckley
Andre Hübner wrote: Hi dovecot-list, just a easy question today ;) Customer did on Server a PCI-Test to test security to fit worldpay requirements. NB: PCI is not to fit Worldpay's requirements; but rather the body of PCI-DSS (Visa Mastercard). 1. What was the scanning tool? Qualys? 2.