On 12. Mar 2023, at 20.17, Patrick Mansfield wrote:
>
> Mar 12 10:32:27 goffin dovecot[8269]: imap(patman)<8452>:
> Panic: file istream-header-filter.c: line 663
> (i_stream_header_filter_snapshot_free): assertion failed:
> (snapshot->mstream->snapshot_pending)
This is unfortunately rather
dovecot --version
2.3.20 (80a5ac675d)
having the following setup:
(1)
aioria:/srv/franper/mail # cat /etc/dovecot/users
***snip***
ventas-respa...@franper.net:*snip*:1001:1000::/srv/franper/mail/ventas
(2)
aioria:/srv/franper/mail # ls -lha
total 0
drwxr-x---. 1 1001 1000 238 Mar 13 05:07 .
> On 13/03/2023 15:24 EET Serg wrote:
>
>
> Hello, is there any way to disallow client-initiated renegotiation at
> the dovecot? I haven't found any mention of this feature within source
> code as well as at the documentation.
>
> I am asking about it because without this feature mail
On Mon, Mar 13, 2023 at 11:01:35AM +0200, Timo Sirainen wrote:
> On 12. Mar 2023, at 20.17, Patrick Mansfield wrote:
> >
> > Mar 12 10:32:27 goffin dovecot[8269]: imap(patman)<8452>:
> > Panic: file istream-header-filter.c: line 663
> > (i_stream_header_filter_snapshot_free): assertion failed:
Hello, is there any way to disallow client-initiated renegotiation at
the dovecot? I haven't found any mention of this feature within source
code as well as at the documentation.
I am asking about it because without this feature mail server is
vulnerable to a TLS renegotiation DoS attack
> After the above, it's no longer crashing, and my email client's "pending
> operations" have
> cleared.
Does your server use ECC memory and if so, are there any errors logged
(bitflip, ...)?
Best regards,
Gerald
On Mon, Mar 13, 2023 at 04:33:38PM +0100, Gerald Galster wrote:
> > After the above, it's no longer crashing, and my email client's "pending
> > operations" have
> > cleared.
>
> Does your server use ECC memory and if so, are there any errors logged
> (bitflip, ...)?
>
> Best regards,
> Gerald
>>> After the above, it's no longer crashing, and my email client's "pending
>>> operations" have
>>> cleared.
>>
>> Does your server use ECC memory and if so, are there any errors logged
>> (bitflip, ...)?
>>
>> Best regards,
>> Gerald
>
> I don't have the logs from that time them nor do I
