- dovecot - dovecot.org

[Dovecot] interesting note - not sure just how to take care of this one
by Joseph Norris 12 Mar '08

12 Mar '08

Hello all, the dovecot -> ldap connection is working correctly but I notice something in my maillog that is disturbing: dovecot.conf in the passdb section I have passdb passwd { } then it drops down into the ldap stuff. The user gets validated via this first and if it fails passes on to the ldap stuff. the problem is: in the file the user's unencrypted password is showing up as follows: Mar 12 11:24:41 malaga dovecot: auth(default): pam(jnorris,XXX.XXX.XXX.XXX): pam_authenticate() failed: Authentication failure Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): lookup Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): Password mismatch Mar 12 11:24:41 malaga dovecot: auth(default): passwd(jnorris,XXX.XXX.XXX.XXX): CRYPT("the uncrypted password in plain text here") != 'x' is there a way to disable this? thanks. -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

2 1

[Dovecot] IMAP storage - mail_location = maildir:~/Maildir:mbox:~/mail/
by Tim Alberts 12 Mar '08

12 Mar '08

I'm moving to IMAP and trying to understand all the details of where to save email. The system is CentOS running sendmail - procmail which delivers as: DEFAULT=$HOME/Maildir/ I'm trying also to use Usermin as the webmail client. I can get mail to deliver to $HOME/Maildir/ and I can get clients (thunderbird outlook etc) to view them. However Usermin seems stuck with saving 'Drafts' 'Sent' and 'Trash' in $HOME/mail/ as mbox and Dovecot won't find them even when I use the setting: maildir:~/Maildir:mbox:~/mail/ I don't know what exact question to ask to I'll just ask for any thoughts on this? Second question, different topic. Are there problems with running POP3 and IMAP? I've always run POP3 and I'm thinking to move to IMAP for some clients so the Usermin webmail will be better 'synchronized' with the users inbox. *> dovecot --version * 1.0.10 *> dovecot -n * # 1.0.10: /etc/dovecot.conf protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir:mbox:~/mail/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam args: dovecot userdb: driver: passwd args: blocking=yes

2 4

[Dovecot] deliver fails - passdb doesn't support lookups?
by Kyle Wheeler 12 Mar '08

12 Mar '08

Hello, I'm trying to get `deliver` (the LDA) to function properly. I can get it to work without doing a user lookup, but for my own sense of sanity, I want to know what I'm doing wrong getting user lookups working. (I'm using dovecot 1.0.10). Here's what I have in the "auth default" section: auth default { mechanisms = plain login passdb ldap { args= /var/lib/dovecot/dovecot-ldap.conf } userdb static { args = uid=3728 gid=3728 home=/domains/%Ld/%Ln } user = vpopmail socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vpopmail group = vchkpw } client { path = /var/run/dovecot/auth-client mode = 0660 } } } And yet, when I run deliver, I get no warnings, no errors, and most especially, no email delivered. Here's how I call deliver: cat testemail | setuidgid vpopmail \ /usr/local/libexec/dovecot/deliver \ -d testuser(a)example.com I tried running deliver within strace, and here's what I found. It opens up the authentication socket and writes: VERSION\t1\t0\nUSER\t1\ttestuser(a)example.com\tservice=deliver\n And it gets back: VERSION\t1\t0\nSPID\t10917\nFAIL\t1\n" If I understand the authentication protocol correctly, that means an internal error occurred. The dovecot log file reports this: Error: auth(default): static(testuser(a)example.com): passdb doesn't support lookups, can't verify user's existence passdb? I thought it was the userdb that was important! What's going on here? ~Kyle -- Men, as an organization, are getting more women than any other group working anywhere in the world. Wherever women are, we have men looking into it. -- Jerry Seinfeld

2 2

[Dovecot] Debugging sieve-options
by Jens Meyer 12 Mar '08

12 Mar '08

Hello all! I am using a dovecot-server since several weeks - and am really impressed about this server (after using courier and cyrus). I tried to install the sieve-plugin now (CentOS RPM) and configured sieve like described in your WIKI (and on several other pages). Unfortunately I can not connect to port 2000 (sieve-administration?!) nor are there any messages regarding sieve in the logs. Can you give me any hints for further testing/debuggin? My part of configuration: --> protocol lda { postmaster_address = postmaster(a)myserver.de auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve } <-- My output of "dovecot -n": --> # 1.0.12: /etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: imap pop3 listen: * login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_extra_groups: mail mail_access_groups: mail mail_location: maildir:/var/mail/virtual/%d/%n mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %u-%v namespace: type: private prefix: INBOX. inbox: yes auth default: mechanisms: plain login user: vmail username_format: %Lu passdb: driver: sql args: /etc/dovecot/dovecot-sql-domain.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql-subdomain.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql-aliasdomain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-domain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-subdomain.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql-aliasdomain.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail <-- Thank you, kind regards, Jens

2 2

[Dovecot] Sieve doesnt filter
by Sven Schmidt 12 Mar '08

12 Mar '08

Hi! I have a config like this (globalsieverc): require "fileinto"; if address :domain :is "to" "domain.de" { if header :matches "X-Spam-Level" "\\*\\*\\*\\*\\*\\*\\*\\*" { #discard; fileinto "spamdir"; } } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } It should filter all Mail for "domain.de" and then look for spam score.

4 5

[Dovecot] Fileinto to a maildir with sieve
by Nicolas Letellier 12 Mar '08

12 Mar '08

Hello, Is it possible to specify a maildir to a fileinto rule in a sieve file? A simple: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto ".Junk"; } does'nt work becaise .Junk is a directoty, not a mailbox... See my dovecot-deliver log: Couldn't open mailbox .Junk: Invalid mailbox name Mar 12 09:52:38 helm deliver(nicolas(a)nicoelro.net): sieve runtime error: Fileinto: Generic Error Is it possible to specify a directory (maildir)? Thanks. - Nicolas.

2 3

[Dovecot] Allowing tilde at start of mailbox names
by pod 12 Mar '08

12 Mar '08

In lib-storage/index/maildir/maildir-storage.c maildir_is_valid_create_name() and maildir_is_valid_existing_name() the following sequence of tests appear but I don't really understand why if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; if (*name == '~' || strchr(name, '/') != NULL) return FALSE; If MAIL_STORAGE_FLAG_FULL_FS_ACCESS is set then the validator funcs return TRUE immediately and code elsewhere will do appropriate home_exapand for mailbox names. However if MAIL_STORAGE_FLAG_FULL_FS_ACCESS is not set the (*name == '~') test prevents mailbox names that begin with '~'. Why is it not possible to have mailbox names that begin with '~' but without '~' carrying any special meaning? I have been working on a patch (appended but incomplete; the option only works against maildir atm) that adds a new option mail_allow_tilde and my admittedly limited testing seems to indicate that it does the right thing but maybe I am barking up the wrong tree. Am I missing something here? ---------------------------------------- # HG changeset patch # User <pod(a)sysdev.oucs.ox.ac.uk> # Date 1185368923 -3600 # Node ID ab9cf3790ea9b5486afa6498f60c6bf6fb2e5f1e # Parent a23be695672737967a10613d7dca2a6f53b5d96d create new option mail_allow_tilde diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/index/maildir/maildir-storage.c --- a/src/lib-storage/index/maildir/maildir-storage.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/index/maildir/maildir-storage.c Wed Jul 25 14:08:43 2007 +0100 @@ -240,7 +240,9 @@ static bool maildir_is_valid_create_name if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; - if (*name == '~' || strchr(name, '/') != NULL) + if ((*name == '~' && + (storage->flags & MAIL_STORAGE_FLAG_ALLOW_TILDE) == 0) || + strchr(name, '/') != NULL) return FALSE; if (name[0] == '.' && (name[1] == '\0' || @@ -264,7 +266,9 @@ static bool maildir_is_valid_existing_na if ((storage->flags & MAIL_STORAGE_FLAG_FULL_FS_ACCESS) != 0) return TRUE; - if (*name == '~' || strchr(name, '/') != NULL) + if ((*name == '~' && + (storage->flags & MAIL_STORAGE_FLAG_ALLOW_TILDE) == 0) || + strchr(name, '/') != NULL) return FALSE; if (name[0] == '.' && (name[1] == '\0' || diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/mail-storage.c --- a/src/lib-storage/mail-storage.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/mail-storage.c Wed Jul 25 14:08:43 2007 +0100 @@ -66,6 +66,8 @@ void mail_storage_parse_env(enum mail_st *flags_r = 0; if (getenv("FULL_FILESYSTEM_ACCESS") != NULL) *flags_r |= MAIL_STORAGE_FLAG_FULL_FS_ACCESS; + if (getenv("ALLOW_TILDE") != NULL) + *flags_r |= MAIL_STORAGE_FLAG_ALLOW_TILDE; if (getenv("DEBUG") != NULL) *flags_r |= MAIL_STORAGE_FLAG_DEBUG; if (getenv("MMAP_DISABLE") != NULL) diff -r a23be6956727 -r ab9cf3790ea9 src/lib-storage/mail-storage.h --- a/src/lib-storage/mail-storage.h Tue Jul 24 05:48:03 2007 +0300 +++ b/src/lib-storage/mail-storage.h Wed Jul 25 14:08:43 2007 +0100 @@ -34,7 +34,9 @@ enum mail_storage_flags { fail to create the storage. */ MAIL_STORAGE_FLAG_NO_AUTOCREATE = 0x200, /* Rely on O_EXCL when creating dotlocks */ - MAIL_STORAGE_FLAG_DOTLOCK_USE_EXCL = 0x400 + MAIL_STORAGE_FLAG_DOTLOCK_USE_EXCL = 0x400, + /* Allow folder names to begin with '~' TILDE */ + MAIL_STORAGE_FLAG_ALLOW_TILDE = 0x800 }; enum mail_storage_lock_method { diff -r a23be6956727 -r ab9cf3790ea9 src/master/mail-process.c --- a/src/master/mail-process.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/mail-process.c Wed Jul 25 14:08:43 2007 +0100 @@ -254,6 +254,8 @@ mail_process_set_environment(struct sett env_put("DEBUG=1"); if (set->mail_full_filesystem_access) env_put("FULL_FILESYSTEM_ACCESS=1"); + if (set->mail_allow_tilde) + env_put("ALLOW_TILDE=1"); if (set->pop3_no_flag_updates) env_put("POP3_NO_FLAG_UPDATES=1"); if (set->pop3_reuse_xuidl) diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings-defs.c --- a/src/master/master-settings-defs.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings-defs.c Wed Jul 25 14:08:43 2007 +0100 @@ -67,6 +67,7 @@ static struct setting_def setting_defs[] DEF(SET_INT, mailbox_idle_check_interval), DEF(SET_BOOL, mail_debug), DEF(SET_BOOL, mail_full_filesystem_access), + DEF(SET_BOOL, mail_allow_tilde), DEF(SET_INT, mail_max_keyword_length), DEF(SET_BOOL, mail_save_crlf), DEF(SET_BOOL, mail_read_mmaped), diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings.c --- a/src/master/master-settings.c Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings.c Wed Jul 25 14:08:43 2007 +0100 @@ -216,6 +216,7 @@ struct settings default_settings = { MEMBER(mailbox_idle_check_interval) 30, MEMBER(mail_debug) FALSE, MEMBER(mail_full_filesystem_access) FALSE, + MEMBER(mail_allow_tilde) FALSE, MEMBER(mail_max_keyword_length) 50, MEMBER(mail_save_crlf) FALSE, MEMBER(mail_read_mmaped) FALSE, diff -r a23be6956727 -r ab9cf3790ea9 src/master/master-settings.h --- a/src/master/master-settings.h Tue Jul 24 05:48:03 2007 +0300 +++ b/src/master/master-settings.h Wed Jul 25 14:08:43 2007 +0100 @@ -75,6 +75,7 @@ struct settings { unsigned int mailbox_idle_check_interval; bool mail_debug; bool mail_full_filesystem_access; + bool mail_allow_tilde; unsigned int mail_max_keyword_length; bool mail_save_crlf; bool mail_read_mmaped;

3 12

[Dovecot] question about dovecot imap outlook clients
by Joseph Norris 11 Mar '08

11 Mar '08

Hello, Well... thanks to the input of all of you I have my dovecot->ldap connection working for almost all of my clients, however... on outlook, a message for certificates being trusted comes up, the user clicks yes and connection fails. Questions: Do I have to get an ssl certificate to make it work? ( cost ouch!) Is there a way around this using my own self-signed certificates? Is there a cheaper ssl certificate service? thanks -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

5 4

[Dovecot] Who's wrong, atmail or dovecot?
by Andy Dills 11 Mar '08

11 Mar '08

We recently switched to atmail, as well as dovecot. I noticed in atmail the size of the mailboxes was always reported as 0kb. So, I did some debugging, and it boiled down to the fact that the regular expression used by dovecot expected UID before SIZE, but Dovecot returned SIZE before UID. No biggy, I changed the regex, but I was curious if there was a standard. Here's the imap query that is sent: UID FETCH 1:* (RFC822.SIZE) Here's the diff I implemented to make it work: http://www.xecu.net/atmail/dovecot_sizes.diff So...is this something that is standard or something atmail needs to handle by making their regex more dynamic? Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

3 2

[Dovecot] Version info in Makefiles after hg update
by Steffen Kaiser 11 Mar '08

11 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I have noticed that the version of Dovecot does not adjust, when you upgrade the hg repository. ./configure alone is not sufficient, it looks like that only a ./autogen.sh - ./configure corrects the Makefiles. Is it recommended to run autogen after each update? Thanks, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH1mfzVJMDrex4hCIRAkC0AKCc6N27nWfQQdeZC7JYp+ae6lvonwCffafb 02viZlPCWzx+mxsnUtE5Ihw= =7/ao -----END PGP SIGNATURE-----

2 1

[Dovecot] Consecutive crashes of serveral imapd processes
by Ralf Hildebrandt 11 Mar '08

11 Mar '08

This is 1.0.13, the processes crashed a few seconds apart from each other: GNU gdb 6.7.1-debian Copyright (C) 2007 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1". Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.7.so...done. done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Core was generated by `/usr/local/libexec/dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x080a2754 in imap_bodystructure_write (part=0x80fc7b0, dest=0x80fcb60, extended=true) at imap-bodystructure.c:344 344 text = data->content_type == NULL || #0 0x080a2754 in imap_bodystructure_write (part=0x80fc7b0, dest=0x80fcb60, extended=true) at imap-bodystructure.c:344 #1 0x08081b74 in index_mail_parse_bodystructure (mail=0x80f8538, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:601 #2 0x08081f4f in index_mail_get_special (_mail=0x80f8538, field=MAIL_FETCH_IMAP_BODYSTRUCTURE) at index-mail.c:728 #3 0x0806f3c7 in maildir_mail_get_special (_mail=0x80f8538, field=72) at maildir-mail.c:192 #4 0x0805ecfe in fetch_bodystructure (ctx=0x80dcfc8, mail=0x80f8538, context=0x0) at imap-fetch.c:416 #5 0x0805f85c in imap_fetch (ctx=0x80dcfc8) at imap-fetch.c:290 #6 0x08059bee in cmd_fetch (cmd=0x80da334) at cmd-fetch.c:163 #7 0x0805d12f in client_handle_input (cmd=0x80da334) at client.c:344 #8 0x0805d1bc in client_handle_input (cmd=0x80da334) at client.c:398 #9 0x0805d85f in _client_input (context=0x80da2f0) at client.c:441 #10 0x080b49f7 in io_loop_handler_run (ioloop=0x80d79b0) at ioloop-epoll.c:203 #11 0x080b3c6c in io_loop_run (ioloop=0x80d79b0) at ioloop.c:329 #12 0x080658ac in main (argc=) at main.c:290 ----- End forwarded message ----- ----- Forwarded message from root <root(a)postamt.charite.de> ----- From: root <root(a)postamt.charite.de> Date: Mon, 10 Mar 2008 22:57:41 +0100 (CET) To: ralf.hildebrandt(a)charite.de Subject: Backtrace:/usr/local/libexec/dovecot/imap GNU gdb 6.7.1-debian Copyright (C) 2007 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1". Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.7.so...done. done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Core was generated by `/usr/local/libexec/dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x080a2754 in imap_bodystructure_write (part=0x80fc2a0, dest=0x80fc650, extended=true) at imap-bodystructure.c:344 344 text = data->content_type == NULL || #0 0x080a2754 in imap_bodystructure_write (part=0x80fc2a0, dest=0x80fc650, extended=true) at imap-bodystructure.c:344 #1 0x08081b74 in index_mail_parse_bodystructure (mail=0x80e85a8, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:601 #2 0x08081f4f in index_mail_get_special (_mail=0x80e85a8, field=MAIL_FETCH_IMAP_BODYSTRUCTURE) at index-mail.c:728 #3 0x0806f3c7 in maildir_mail_get_special (_mail=0x80e85a8, field=72) at maildir-mail.c:192 #4 0x0805ecfe in fetch_bodystructure (ctx=0x80dcfc8, mail=0x80e85a8, context=0x0) at imap-fetch.c:416 #5 0x0805f85c in imap_fetch (ctx=0x80dcfc8) at imap-fetch.c:290 #6 0x08059bee in cmd_fetch (cmd=0x80da334) at cmd-fetch.c:163 #7 0x0805d12f in client_handle_input (cmd=0x80da334) at client.c:344 #8 0x0805d1bc in client_handle_input (cmd=0x80da334) at client.c:398 #9 0x0805d85f in _client_input (context=0x80da2f0) at client.c:441 #10 0x080b49f7 in io_loop_handler_run (ioloop=0x80d79b0) at ioloop-epoll.c:203 #11 0x080b3c6c in io_loop_run (ioloop=0x80d79b0) at ioloop.c:329 #12 0x080658ac in main (argc=) at main.c:290 ----- End forwarded message ----- ----- Forwarded message from root <root(a)postamt.charite.de> ----- From: root <root(a)postamt.charite.de> Date: Mon, 10 Mar 2008 23:05:42 +0100 (CET) To: ralf.hildebrandt(a)charite.de Subject: Backtrace:/usr/local/libexec/dovecot/imap GNU gdb 6.7.1-debian Copyright (C) 2007 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1". Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.7.so...done. done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Core was generated by `/usr/local/libexec/dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x080a2754 in imap_bodystructure_write (part=0x80f8b90, dest=0x80f8f40, extended=true) at imap-bodystructure.c:344 344 text = data->content_type == NULL || #0 0x080a2754 in imap_bodystructure_write (part=0x80f8b90, dest=0x80f8f40, extended=true) at imap-bodystructure.c:344 #1 0x08081b74 in index_mail_parse_bodystructure (mail=0x80f8760, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:601 #2 0x08081f4f in index_mail_get_special (_mail=0x80f8760, field=MAIL_FETCH_IMAP_BODYSTRUCTURE) at index-mail.c:728 #3 0x0806f3c7 in maildir_mail_get_special (_mail=0x80f8760, field=72) at maildir-mail.c:192 #4 0x0805ecfe in fetch_bodystructure (ctx=0x80dcfc8, mail=0x80f8760, context=0x0) at imap-fetch.c:416 #5 0x0805f85c in imap_fetch (ctx=0x80dcfc8) at imap-fetch.c:290 #6 0x08059bee in cmd_fetch (cmd=0x80da334) at cmd-fetch.c:163 #7 0x0805d12f in client_handle_input (cmd=0x80da334) at client.c:344 #8 0x0805d1bc in client_handle_input (cmd=0x80da334) at client.c:398 #9 0x0805d85f in _client_input (context=0x80da2f0) at client.c:441 #10 0x080b49f7 in io_loop_handler_run (ioloop=0x80d79b0) at ioloop-epoll.c:203 #11 0x080b3c6c in io_loop_run (ioloop=0x80d79b0) at ioloop.c:329 #12 0x080658ac in main (argc=) at main.c:290 ----- End forwarded message ----- -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Make something idiot-proof and the universe will create a better idiot.

2 2

[Dovecot] POP3 Dictionary Attack Causes Complete Dovecot Failure Without Notice
by Sabahattin Gucukoglu 11 Mar '08

11 Mar '08

Hi, Whenever my Dovecot installation is POP3-dictionary-attacked, a large number of log entries written to /var/log/local0 from the syslog showing all the POP3 login and shadow lookup failures is produced and then the entire Dovecot installation crashes, master and all. Unfortunately, it was running unattended under normal use, is apparently quite hard to reproduce (I wrote a Tcl script that just pipelined a load of random strings with user/pass but nothing interesting happened), and leaves no actual diagnosis or core dump for the crash. Hopefully there's enough information for you to at least guess what's happening. I know some of this is outdated and a bit optimistically configured. It's my hope to get this all upgraded very soon, but thought you should have it in case it turns out to be an obvious bug. Dovecot version: 1.0rc7 OS: Gentoo Linux 2007.0 (Linux 2.6.18-gentoo-r2 / glibc 2.5-r4 / gcc 3.4.4 / i686-pc-linux-gnu) Filesystem: EXT2 w/ btree indexes dovecot -n output: # /etc/dovecot.conf syslog_facility: local0 protocols: imap pop3 imaps pop3s listen: 83.146.49.241 ssl_cert_file: /etc/ssl/certs/bloodstone.pem ssl_key_file: /etc/ssl/private/bloodstone.pri ssl_parameters_regenerate: 1 ssl_cipher_list: ALL:COMPLEMENTOFALL:@STRENGTH disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Service ready. login_process_size: 128 login_processes_count: 1 login_max_processes_count: 134217728 max_mail_processes: 134217728 first_valid_uid: 5000 first_valid_gid: 1002 last_valid_gid: 1002 default_mail_env: maildir:%h/.mail mail_full_filesystem_access: yes mail_max_keyword_length: 134217728 mmap_disable: yes mmap_no_write: yes maildir_stat_dirs: yes umask: 3647 mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_size: 128 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_max_line_length(default): 134217728 imap_max_line_length(imap): 134217728 imap_max_line_length(pop3): 65536 imap_client_workarounds(default): imap_client_workarounds(imap): imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v%u%f auth default: mechanisms: apop cram-md5 digest-md5 plain login ntlm realms: Bloodstone.Sabahattin-Gucukoglu.com username_chars: abcdefghijklmnopqrstuvwxyz anonymous_username: verbose: yes worker_max_count: 134217728 process_size: 128 passdb: driver: shadow passdb: driver: passwd-file args: /etc/dovecot.secrets userdb: driver: passwd (The umask is not what I have in the config - 00700 - but it doesn't really matter since the maildir files are still OK with 0600. The number 134217728 is just a large magic number I set to avoid reaching a limit.) Messages from the syslog about one of the attacks: Mar 3 22:40:25 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:25 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:25 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:25 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:25 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:25 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:25 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:25 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:25 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:26 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:26 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:26 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:26 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:26 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:26 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:26 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:26 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:40:27 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:27 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:27 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:27 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:28 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:29 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:29 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Disconnected: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Disconnected: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: pop3-login: Disconnected: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(morgan,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(morgan,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:30 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:31 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:31 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:31 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:31 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:31 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:31 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: pop3-login: Disconnected: rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:40:32 Bloodstone dovecot: pop3-login: Disconnected: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:32 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:32 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:32 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:32 Bloodstone dovecot: pop3-login: Disconnected: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Disconnected: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(morgan,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(morgan,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:33 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:34 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:34 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:34 Bloodstone dovecot: pop3-login: Disconnected: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:34 Bloodstone dovecot: pop3-login: Disconnected: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:34 Bloodstone dovecot: pop3-login: Disconnected: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:35 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: pop3-login: Aborted login: rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:36 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:36 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Disconnected: rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:37 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<bell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:40:38 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:40:39 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:40:39 Bloodstone dovecot: auth(default): shadow(reed,83.235.17.13): unknown user Mar 3 22:40:39 Bloodstone dovecot: auth(default): passwd- file(reed,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:40 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<bell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:41 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:40:41 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:40:42 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:44 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:44 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:44 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:44 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:44 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:45 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(reed,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(reed,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<bell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: pop3-login: Disconnected: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:46 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:47 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): shadow(morgan,83.235.17.13): unknown user Mar 3 22:40:48 Bloodstone dovecot: auth(default): passwd- file(morgan,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:40:49 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(reed,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(reed,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:40:50 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<bell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(morgan,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(morgan,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:52 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:53 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:53 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:53 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:53 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:54 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:40:55 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:55 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:57 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:40:57 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:58 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:58 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:58 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(johnson,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(johnson,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(reed,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(reed,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(allen,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(allen,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:40:58 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:40:59 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<allen>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:00 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:41:00 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:41:00 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:41:01 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:41:01 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:41:01 Bloodstone dovecot: auth(default): shadow(postmaster,83.235.17.13): unknown user Mar 3 22:41:01 Bloodstone dovecot: auth(default): passwd- file(postmaster,83.235.17.13): unknown user Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:01 Bloodstone dovecot: auth(default): shadow(spam,83.235.17.13): unknown user Mar 3 22:41:01 Bloodstone dovecot: auth(default): passwd- file(spam,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(webmaster,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(webmaster,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(wilson,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(wilson,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(reed,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(reed,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(phillips,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(phillips,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(web,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(miller,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(miller,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(turner,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(turner,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(testing,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): passwd- file(testing,83.235.17.13): unknown user Mar 3 22:41:02 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(morgan,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(morgan,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<bell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:41:03 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:41:04 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:41:04 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:41:04 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:41:04 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:41:04 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(young,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(young,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(clark,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(clark,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(thomas,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(thomas,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(info,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(info,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(mitchell,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(mitchell,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(reed,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(reed,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(morgan,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(morgan,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(williams,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(williams,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): shadow(post,83.235.17.13): unknown user Mar 3 22:41:06 Bloodstone dovecot: auth(default): passwd- file(post,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(green,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(green,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(moore,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(moore,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(hall,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(hall,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(garcia,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(garcia,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(blue,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(blue,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(carter,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(carter,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(martin,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(martin,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(scott,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(scott,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(lee,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(lee,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(nelson,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(nelson,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(guest,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(guest,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(white,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(white,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(perez,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(perez,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(davis,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(davis,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(taylor,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(taylor,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(james,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(james,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(david,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(david,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(brown,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(brown,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): shadow(jack,83.235.17.13): unknown user Mar 3 22:41:08 Bloodstone dovecot: auth(default): passwd- file(jack,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(murphy,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(murphy,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(jones,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(jones,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(bell,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(bell,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(smith,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(smith,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(harris,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(harris,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(smpt,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(smpt,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): shadow(cook,83.235.17.13): unknown user Mar 3 22:41:09 Bloodstone dovecot: auth(default): passwd- file(cook,83.235.17.13): unknown user Mar 3 22:41:12 Bloodstone dovecot: pop3-login: Aborted login: user=<postmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:12 Bloodstone dovecot: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:12 Bloodstone dovecot: pop3-login: Aborted login: user=<williams>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<reed>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<johnson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<post>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<info>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<morgan>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<hall>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<miller>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<wilson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<clark>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<moore>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<young>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<blue>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<spam>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<turner>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<thomas>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<mitchell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<garcia>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<green>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<scott>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<martin>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<carter>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<testing>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<phillips>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<anderson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<roberts>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<black>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<lewis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<mail>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<test>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<root>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<nelson>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<cook>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<smpt>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<harris>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<smith>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<bell>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<jones>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<murphy>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: Login process died too early - shutting down Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<jack>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<brown>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<david>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<james>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<taylor>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<davis>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<perez>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<white>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<guest>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: pop3-login: Aborted login: user=<lee>, method=PLAIN, rip=83.235.17.13, lip=83.146.49.241 Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(root,83.235.17.13): password mismatch Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(root,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(test,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(test,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(mail,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(mail,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(lewis,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(lewis,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(black,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(black,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(roberts,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(roberts,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(anderson,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): passwd- file(anderson,83.235.17.13): unknown user Mar 3 22:41:13 Bloodstone dovecot: auth(default): shadow(web,83.235.17.13): unknown user Mar 3 22:41:14 Bloodstone dovecot: auth(default): passwd-file(web, Yes, that's really the last line, incomplete. That's what I saw when I found that all the processes of Dovecot had died. Just before the first line was normal activity; after the last was Dovecot starting up again. I hope this helps! Cheers, Sabahattin -- Sabahattin Gucukoglu <mail<at>sabahattin<dash>gucukoglu<dot>com> Address harvesters, snag this: feedme(a)yamta.org Phone: +44 20 88008915 Mobile: +44 7986 053399 http://sabahattin-gucukoglu.com/

2 1

[Dovecot] Maturity of dbox
by Anders 11 Mar '08

11 Mar '08

Hi, I am contemplating migrating from maildir to dbox. However, I wonder about the maturity of the dbox code, as it appears to not be widely used. Does anybody have some success stories? My primary driver is to have non-changing file names, and thus smaller backup deltas. Are there other advantages that I should pursue? I read in the wiki that the migration is straightforward, but I did not manage to find an exact description. Pointers? Also, is it possible to migrate back, should it not work out? Thanks, Anders.

4 4

[Dovecot] 1.0.13: mail_extra_groups alternative syntax?
by Dâniel Fraga 11 Mar '08

11 Mar '08

"Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead" I use the following: mail_extra_groups = mail nogroup Because I have the real and virtual accounts. What's the correct way to replace the above line? It seems that mail_privileged_group only accepts one group, but I need two. Any suggestion? Thank you! -- Linux 2.6.24: Arr Matey! A Hairy Bilge Rat! http://u-br.net http://www.abusar.org/FELIZ_2008.html

2 2

[Dovecot] Cingular/ATT killing my IMAP/POP connections with bad TCP FIN packets?
by Peter Tripp 11 Mar '08

11 Mar '08

Hello all, I've got an issue I'm almost positive is not related to Dovecot, but was wondering whether anyone else has had similar problems or could duplicate my results. Please accept my apologies if this is considered off-topic or this issue is actually just a symptom of my own ignorance. Also, sorry for how long this email got, I knew I wouldn't be able to explain my issue in a paragraph. I'm having issues connecting to my dovecot mail server, running with SSL under Solaris while connected via Cingular/ATT wireless, specifically via the wap.cingular access point. This server is not firewall, either via software or hardware and sits on a fully routable internet IP address. A few days after we made the transition from UW-IMAP to Dovecot, I could no longer connect from my Nokia E61i to our server (IMAP w/ SSL, port 993). Until today, I just assumed I did something to anger the Nokia gods and just did without mobile email. Today, someone walked in with an iPhone and could only connect to our server via wifi connections, not over Cingular/ATT's EDGE network. When I looked into it, I saw the same behavior with my E61i which also has wifi. Here's where it gets weird. I can connect to other IMAP servers (imap.gmail.com, mail.columbia.edu) but not to our departmental mail server running dovcot (paradox.psych.columbia.edu) All three are on port 993 using IMAP with SSL. Ping, SSH and web traffic don't have any difficulty getting through, but IMAP/POP seems to be prematurely disconnected. So I did a little digging, by tethering my Macbook with Thunderbird through my phone I saw the following traffic in Wireshark between me and my server (Paradox): Me: SYN Paradox: SYN, ACK Me: ACK Me: Client Hello Paradox: ACK Paradox: FIN, ACK Me: ACK Paradox: FIN, ACK Me: ACK -dead- Maybe I'm misunderstanding something here, but it looks likely that ATT is sending a FIN which kills the connection before my mail client can even get out of the gate. I thought it might be related to SSL so I setup a inetd to launch a secondary dovecot process listening on port 997 without encryption. I see the same behavior, without the "Client Hello" above. I've also run it on other ports and seen the same behavior. Needless to say, both SSL/noSSL work without issue from local and a variety of remote networks, except ATT. Tomorrow I'll do some sniffing to confirm that Cingular is sending a fake TCP FIN packet, but I've got to wait till the network folks set me up a port in mirror mode. I did not paste the full Wireshark output as it has long lines which would look hella ugly in email, so here it is nicely formatted: http://duckies.org/~peter/damncingular.txt Has anyone else seen similar behavior or know what might be causing this? It looks like ATT/Cingular is killing the connection before it really ever even gets started, but I have no idea why. I've spent a couple hours on the phone with them and not been able to contact anyone who might know why this just started happening when it had been working before. Can anyone replicate the same behavior, you shouldn't need an un/pw as it doesn't get that far, just need an ATT customer with tethering setup to capture an attempt at connecting to the server (paradox.psych.columbia.edu) Ideas? I'm totally stumped, but it sounds a lot like the sort of thing Comcast was doing to Bittorrent for their users, except they were injecting RST instead of FIN. Thanks in advance for any help anyone might be able to offer me. --Peter

2 1

[Dovecot] Setting individual SSL/TLS settings with OpenLDAP
by Patrick Ben Koetter 10 Mar '08

10 Mar '08

I am using OpenLDAP to read Dovecot User settings and want to use TLS for user_attrs and pass_attrs queries. So I set "tls = yes" and it kept failing until I told the OpenLDAP ldap client in /etc/ldap/ldap.conf where the CA certificate can be found. So far so good. Now just in case... could I tell dovecot to read the OpenLDAP client settings from a non default configuration file e.g. /etc/dovecot/ldaprc. I know Cyrus SASL can do this with the ldapdb plugin and I'd be interested if this is possible with Dovecot too. TIA, p@rick -- state of mind Agentur für Kommunikation, Design und Softwareentwicklung Patrick Koetter Tel: 089 45227227 Echinger Strasse 3 Fax: 089 45227226 85386 Eching Web: http://www.state-of-mind.de Amtsgericht München Partnerschaftsregister PR 563

2 2

[Dovecot] Quota handling on NFS Maildir
by mikkel＠euro123.dk 10 Mar '08

10 Mar '08

Hi Throughout the v. 1.1 betas I have been receiving casual reports that quota isn't handled correctly (running Maildir). At the moment I'm running 1.1beta14 but this has been occurring in all other 1.1 betas as well (I don't know for sure whether this was also an issue in 1.0, but I think so). In some earlier betas the issue where worse than is is now (due to improved NFS locking I guess). Apparently this occurs when the user shifts between pop3 and IMAP. maildirsize gets updated whenever mails are coming in, no problems there. But mails removed aren't always counted as removed - as a result some users quota keep growing until they reach a limit and e-mails start getting rejected. I have been doing some testing and it appears that the updating of the file maildirsize is sometimes delayed. I figure this is because Dovecot collects theese changes in the transactions or index file and then once in a while writes them to maildirsize. Could there be a week spot in the code somewhere that allow for this kind of error when the use of POP3 and IMAP are mixed (I think this happens even when POP3 and IMAP access aren't concurrent)? Both my index files and mail storage are located on NFS. Regards, Mikkel This is the output of dovecot -n: # 1.1.beta14: /local/config/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 768). Either grow the limit or change login_max_processes_count and max_mail_processes settings log_path: /local/log/dovecot.run info_log_path: /local/log/dovecot.run protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /opt/freeware/dovecot-1.1b14/var/run/dovecot/login login_executable(default): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap-login login_executable(imap): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap-login login_executable(pop3): /opt/freeware/dovecot-1.1b14/libexec/dovecot/pop3-login login_process_per_connection: no verbose_proctitle: yes first_valid_uid: 105 first_valid_gid: 105 mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap mail_executable(imap): /opt/freeware/dovecot-1.1b14/libexec/dovecot/imap mail_executable(pop3): /opt/freeware/dovecot-1.1b14/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota trash mail_plugins(imap): quota imap_quota trash mail_plugins(pop3): quota mail_plugin_dir(default): /opt/freeware/dovecot-1.1b14/lib/dovecot/imap mail_plugin_dir(imap): /opt/freeware/dovecot-1.1b14/lib/dovecot/imap mail_plugin_dir(pop3): /opt/freeware/dovecot-1.1b14/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 cram-md5 apop ntlm cache_size: 4096 cache_ttl: 120 passdb: driver: sql args: /local/config/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /local/config/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir quota_rule2: Trash:storage=10M:messages=100 trash: /local/config/dovecot-trash.conf

3 8

Re: [Dovecot] messages downloading repeatedly to mozilla/seamonkey pop3 client
by Ben Julian 10 Mar '08

10 Mar '08

Asheesh, Sorry about the long delay. I tried upgrading to version 1.0.12, which I understood to be the newest release for CentOS 5. I am still experiencing the problem. What should I try next? Thanks, Ben On Wed, Mar 5, 2008 at 5:51 PM, Ben Julian <ben.julian(a)gmail.com> wrote: > Just read "[Dovecot] Problem with Thunderbird hang, multiple retry to > .Sent/.Draft" thread, and I see that I have the same version and > really need to upgrade. I will try that first. > -Ben > > > > On Wed, Mar 5, 2008 at 4:48 PM, Ben Julian <ben.julian(a)gmail.com> wrote: > > output of dovecot -n: > > > > # /etc/dovecot.conf > > login_dir: /var/run/dovecot/login > > login_executable(default): /usr/libexec/dovecot/imap-login > > login_executable(imap): /usr/libexec/dovecot/imap-login > > login_executable(pop3): /usr/libexec/dovecot/pop3-login > > first_valid_uid: 100 > > mail_executable(default): /usr/libexec/dovecot/imap > > mail_executable(imap): /usr/libexec/dovecot/imap > > mail_executable(pop3): /usr/libexec/dovecot/pop3 > > mail_plugin_dir(default): /usr/lib/dovecot/imap > > mail_plugin_dir(imap): /usr/lib/dovecot/imap > > mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 > > pop3_client_workarounds(default): > > pop3_client_workarounds(imap): > > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > > auth default: > > passdb: > > driver: pam > > userdb: > > driver: passwd > > > > Version of dovecot: 1.0.rc15 > > Came as the bundled pop3/imap client with CentOS5, version 2.6.18-8.el5 > > > > Thanks Asheesh, > > Ben > > > > > > > > > > On Wed, Mar 5, 2008 at 3:27 PM, Asheesh Laroia <asheesh(a)asheesh.org> wrote: > > > On Wed, 5 Mar 2008, Ben Julian wrote: > > > > > > > All changes resulted in only a brief (1-2hr) cessation of the problem. > > > > > > > > I've subscribed for a month or so now and searched the archives, but > > > > if I missed a solution to this in there, I apologize. > > > > > > That sounds like a drag. Let's see if we can help you. > > > > > > Can you paste the results of dovecot -n into a message? That way we can > > > see your whole configuration. What version of Dovecot are you using, and > > > where did you get it from? > > > > > > (I'm expecting you to tell me you're running some really old version, and > > > I further expect that if you upgrade your woes will go away; but let's > > > see!) > > > > > > -- Asheesh. > > > > > > -- > > > A long-forgotten loved one will appear soon. > > > > > > Buy the negatives at any price. > > > > > >

1 0

[Dovecot] Multiple SSL certs
by Daniel L. Miller 10 Mar '08

10 Mar '08

Does 1.1 support multiple certs? -- Daniel

4 4

[Dovecot] Maildirsize automatically (re)build
by Jan van den Berg 10 Mar '08

10 Mar '08

Hi, Im testing with 1.1RC1. I read here: http://wiki.dovecot.org/Quota/Maildir "If you configure quota limits in Dovecot (e.g. quota=maildir:storage=102400(kilobytes)), Dovecot makes sure that this header is kept up to date. If the file does not exist, it's simply rebuilt." This is my query: password_query = SELECT username as user, username as userdb_user, passwd as password, 1001 as userdb_uid, 1001 as userdb_gid, concat('maildir:storage=', quota, 'M:ignore=Spam\ e\-mail') AS userdb_quotarule, 'Trash:storage=20M' as userdb_quota_rule2 FROM mailboxen WHERE username = '%n' Also in the main config I use: mail_plugins: quota imap_quota plugin: quota: maildir So I use maildir:storage in my config. However when I delete the maildirsize (for testing purposes) it doesn't get automatically recreated? According to the Wiki it should right? Cheers, Jan

3 8

[Dovecot] Sorting by Sender Name
by Daniel Watts 10 Mar '08

10 Mar '08

Dear Timo, Posted this originally to the squirrelmail list but they said that sorting is done server side so concluded I needed to talk to you: ============= I feel there is an error in the logic of the sort by From column. If you sort by this column, the messages are re-ordered in alphabetical order using the *email address* as the sorted word. However most people these days have their clients configured to include a sender's name. For example: Daniel Smith <daniel(a)hotmail.com>. In the message list the name 'Daniel Smith' is then shown, not the email. When sorting by From it should use the name as the sorted element and NOT the email address. If my email was zippydan(a)yahoo.com, my emails, showing as 'Daniel Watts' would come right near the bottom of the list rather than with the other 'D's near the top. I know my email clients (Thunderbird and Outlook) both act like this - using the name if available and if not THEN using (and displaying) the email address. This seems to make the most sense to me. Thanks as always for your attention. Daniel

2 2

[Dovecot] invoking LDA in .forward
by Jeremie Bouttier 10 Mar '08

10 Mar '08

Hi, We're running a Debian server with system users where the mail is by default delivered by postfix and procmail, before being served by Dovecot (mail_location = mbox:~/Mail:INBOX=/var/mail/%u) or read by local MUAs, depending on users' preferences. For people using mostly remote MUAs, it might be interesting to use Dovecot's LDA. I read on http://wiki.dovecot.org/LDA that this is possible using .forward files, however this fails on our system with : file_lock_dotlock() failed with mbox file /var/mail/user: Permission denied (/var/mail is 2775 for root:mail as recently discussed). Is there a possible fix ? I also read that deliver is not designed to be run setuid root, I guess this also applies to being run setgid mail... Regards, Jeremie

2 3

Re: [Dovecot] Wrong message information reported shortly after delivery
by Ron Avriel 10 Mar '08

10 Mar '08

> Thanks, in my previous tests I didn't use quota plugin with deliver > which was needed to notice this. The problem is: > > 1. deliver adds "message appended" to index file > 2. quota plugin runs for a while > 3. deliver updates filename<->uid mapping in dovecot-uidlist > Thanks for the quick answer. Why does it take four seconds (!) from the time dovecot first reports an invalid message information until the correct information is reported? The time is measured for the delivery of a 1KB message to an empty mailbox on a completely idle system. 2008-03-09 17:00:41.449833 Sent 1011 bytes to test1(a)imap4test.com 2008-03-09 17:00:41.472034 No messages in INBOX. Waiting... 2008-03-09 17:00:42.480654 No messages in INBOX. Waiting... 2008-03-09 17:00:43.487617 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:44.494382 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:45.501444 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:46.550623 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:47.593704 Got valid RFC822.SIZE 1509: 1 (FLAGS (\Recent) INTERNALDATE "09-Mar-2008 17:00:41 +0200" RFC822.SIZE 1509 UID 63) Thanks again, Ron ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

1 0

[Dovecot] Quota problems with IMAP and POP?
by Nicolas Letellier 10 Mar '08

10 Mar '08

Hello, I would like to know if it could be appears problem using POP and IMAP in a mailbox? Is it adviced to use one of the two protocols? My users use IMAP to see their emails (in the webmail) and POP3 to download their emails (in outlook/thunderbird). Is it best to use the same protocol? POP and IMAP have the same quota engine? Thanks. -Nicolas

2 2

[Dovecot] 1.1 master auth not expanding static userdb variables
by Andrew Roberts 10 Mar '08

10 Mar '08

Can dovecot-1.1 deliver work with static userdb? I'm currently running dovecot-1.0.12 and postfix-2.4.6, with virtual users' maildirs all owned by vmail and mail_location = maildir:/var/mail/%Lu. The following definition of the dovecot transport in postfix/master.conf works fine with dovecot-1.0: dovecot unix - n n - 1 pipe flags=DRh user=vmail:vmail argv=/usr/libexec/dovecot/deliver \ -d ${user}@${nexthop} -n -m ${extension} Note that I'm not using postfix pipe's "u" flag, since that lowercases everything to the left of "@", including the extension, and we need the extension to be case sensitive. Dovecot is configured with static userdb and args = user=%Lu uid=206 gid=206 home=/var/mailhomes/%Lu, which takes care of making sure the username is lowercase. All of this has been working fine for some time with dovecot-1.0. After upgrading to 1.1_rc2, however, deliver creates a maildir named "%Lu" and delivers all mail for all users to it. Everything else works just fine as before: users can log in, postfix can auth smtp via dovecot sasl, etc. I've tried invoking deliver with -k, adding "mail=maildir:/var/mail/%Lu" to the end of the userdb args, and checked file permissions on the auth sockets, maildirs, and virtual homes. Rolling back to 1.0.12 is the only way I can get deliver to behave as expected. What changed between 1.0 and 1.1 in the way deliver does userdb lookups or how dovecot auth serves to it that could cause this? Does anyone here here have a similar config working with 1.1? Has anyone else observed similar behavior? Thanks, Andrew

3 6

[Dovecot] Update from 1.0.10 -> 1.1rc1 file message-parser.c: line 766 (message_parser_parse_next_block): assertion failed
by Ralf Hildebrandt 10 Mar '08

10 Mar '08

Feb 23 20:40:36 postamt dovecot: IMAP(username): file message-parser.c: line 766 (message_parser_parse_next_block): assertion failed: (ctx->input->eof || ctx->input->closed || ctx->input->stream_errno != 0) Feb 23 20:40:36 postamt dovecot: IMAP(username): Raw backtrace: /usr/local/libexec/dovecot/imap [0x8009236d] -> /usr/local/libexec/dovecot/imap [0x80091ed8] -> /usr/local/libexec/dovecot/imap(message_parser_parse_next_block+0xad) [0x8008ae0d] -> /usr/local/libexec/dovecot/imap(index_mail_cache_parse_continue+0x32) [0x80053ab2] -> /usr/local/libexec/dovecot/imap(index_mail_cache_parse_deinit+0x35) [0x80055295] -> /usr/local/libexec/dovecot/imap(maildir_save_finish+0xdb) [0x80034f9b] -> /usr/local/libexec/dovecot/imap(mailbox_save_cancel+0x1b) [0x8005f6ab] -> /usr/local/libexec/dovecot/imap [0x80015d08] -> /usr/local/libexec/dovecot/imap [0x80015ecd] -> /usr/local/libexec/dovecot/imap(client_command_cancel+0x2a) [0x8001b7ca] -> /usr/local/libexec/dovecot/imap(client_destroy+0x6c) [0x8001c0ac] -> /usr/local/libexec/dovecot/imap [0x8001c893] -> /usr/local/libexec/dovecot/imap(io_loop_handle_timeouts+0xeb) [0x80099ddb] -> /usr/local/libexec/dovecot/imap(io_loop_handler_run+0x93) [0x8009aa03] -> /usr/local/libexec/dove Feb 23 20:40:36 postamt dovecot: IMAP(username): /usr/local/libexec/dovecot/imap(main+0x4ae) [0x80024d6e] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe0) [0xb7db7450] -> /usr/local/libexec/dovecot/imap [0x80015be1] Feb 23 20:40:36 postamt dovecot: child 15224 (imap) killed with signal 6 -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de vista policy violation: Microsoft optical mouse detected penguin patterns on mousepad. Partition scan in progress to remove offending incompatible products. Reactivate MS software.

3 3

[Dovecot] 1.1r1: auth-worker(default): BUG: PASSV had missing parameters, sig11
by Adam McDougall 10 Mar '08

10 Mar '08

I don't know how this happened. I'm not sure if there is a coredump somewhere because I don't know what user, and I have nothing for 'root' or 'dovecot'. Any advice, or should I make all my coredumps go to a central writable directory so I have better chance of catching it if it happens again? Is it maybe from someone connecting to postfix and causing a SMTP-AUTH to timeout? Although that is unlikely because users should not know how to reach this server's SMTP ports. I cut most of the surrounding log entries below because they seemed unrelated normal activity, but two of the lines below I left because of the timestamp. socket: type: listen client: path: /var/spool/postfix/private/auth mode: 384 user: postfix group: postfix Mar 8 17:02:17 boomhauer dovecot: auth-worker(default): BUG: PASSV had missing parameters Mar 8 17:03:47 boomhauer dovecot: auth-worker(default): BUG: PASSV had missing parameters Mar 8 17:05:17 boomhauer dovecot: imap-login: Disconnected: Inactivity: method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 8 17:05:17 boomhauer dovecot: child 72819 (login) killed with signal 11 Mar 8 17:06:47 boomhauer dovecot: imap-login: Disconnected: Inactivity: method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 8 17:06:47 boomhauer dovecot: child 72857 (login) killed with signal 11

2 5

[Dovecot] (no subject)
by Brent Clark 10 Mar '08

10 Mar '08

Hi Im trying something new with my test dovecot. I set my mail_location to to a new location mail_location = maildir:/var/maildir/%u/Maildir But with this new setup i too am authenticating against Mysql. This worked fine till i decided to move the mail. So now i have moved the mail, deleted the account from /etc/passwd,, but now in my mail client, i cant view my test mail. Here is my DB set up : +-----------------------------+--------+ | home | user | +-----------------------------+--------+ | /var/maildir/bclark/Maildir | bclark | +-----------------------------+--------+ dovecot-sql set up password_query = SELECT username as user, password, home , uid as userdb_uid, gid as userdb_gid FROM user WHERE username = '%u' and domain = '%d' I have removed Mar 8 15:42:56 eccostorage dovecot: auth(default): client out: CONT^I1^I Mar 8 15:42:56 eccostorage dovecot: auth(default): client in: CONT^I1^IAGJjbGFyawBxYXo= Mar 8 15:42:56 eccostorage dovecot: auth-worker(default): sql(bclark, 192.168.111.31): query: SELECT username as user, password, home , uid as userdb_uid, gid as userdb_gid FROM user WHERE username = 'bclark' and domain = 'eccotours.biz' Mar 8 15:42:56 eccostorage dovecot: auth(default): client out: OK^I1^Iuser=bclark^Ihome=/var/maildir/bclark/Maildir Mar 8 15:42:56 eccostorage dovecot: auth(default): master in: REQUEST^I15^I24965^I1 Mar 8 15:42:56 eccostorage dovecot: auth(default): passwd(bclark, 192.168.111.31): lookup Mar 8 15:42:56 eccostorage dovecot: auth(default): passwd(bclark, 192.168.111.31): unknown user Mar 8 15:42:56 eccostorage dovecot: auth(default): userdb(bclark, 192.168.111.31): user not found from userdb Mar 8 15:42:56 eccostorage dovecot: auth(default): master out: NOTFOUND^I15 Mar 8 15:42:56 eccostorage dovecot: imap-login: Internal login failure: user=<bclark>, method=PLAIN, rip=192.168.111.31, lip=192.168.111.11

2 1

Re: [Dovecot] Wrong message information reported shortly after delivery
by Ron Avriel 10 Mar '08

10 Mar '08

> Can you reproduce it without your IMAP client? For example using > imaptest (http://imapwiki.org/ImapTest) as the client and running: > Hi, Here's some more information on how to easily reproduce the problem. First, I'd like to describe my environment: OS - RHEL4, FS - ext3, dovecot 1.0.12. See dovecot -n at end of message. Messages are delivered via dovecot deliver invoked by postfix. The problem is reproduced when the system is completely idle - no user is logged in, except the test user. I wrote a short python script (attached) that reproduces the problem very easily. The script sends an email via SMTP, then IMAP fetches from inbox to check when message arrives. Once it arrives it checks if the size is zero and reports it. The script ends when dovecot reports a non-zero message size. The script consistently reproduces the problem on every RHEL4 server I tested (weak and strong) and with any file size. The script is run as ./send_fetch_test.py USER PASSWORD FILE [SERVER] FILE - any file. Contents doesn't matter. NOTE - The script initially deletes all messages from inbox just to minimize output. The problem occurs also when other messages exist. Here's a sample output: 2008-03-09 17:00:41.449833 Sent 1011 bytes to test1(a)imap4test.com 2008-03-09 17:00:41.472034 No messages in INBOX. Waiting... 2008-03-09 17:00:42.480654 No messages in INBOX. Waiting... 2008-03-09 17:00:43.487617 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:44.494382 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:45.501444 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:46.550623 **** ERROR: Got invalid RFC822.SIZE 0: 1 (FLAGS (\Recent) INTERNALDATE "01-Jan-1970 00:00:00 +0000" RFC822.SIZE 0 UID 63) 2008-03-09 17:00:47.593704 Got valid RFC822.SIZE 1509: 1 (FLAGS (\Recent) INTERNALDATE "09-Mar-2008 17:00:41 +0200" RFC822.SIZE 1509 UID 63) For this output I attached also the IMAP network capture and a strace of the imap process. dovecot -n: # 1.0.12: /usr/local/etc/dovecot.conf log_timestamp: “%Y-%m-%d %H:%M:%S ” protocols: imap listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_process_per_connection: no first_valid_uid: 150 last_valid_uid: 150 dotlock_use_excl: yes fsync_disable: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_plugins: quota imap_quota auth default: mechanisms: plain login user: nobody master_user_separator: * passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf passdb: driver: passwd-file args: /usr/local/etc/dovecot.masterusers master: yes userdb: driver: prefetch userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: quota: maildir:storage=1024 I hope this helps, Thanks, Ron ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

2 1

[Dovecot] suspect valgrind error in mail-index-map.c
by Diego Liziero 10 Mar '08

10 Mar '08

Hi At line 1118 of src//lib-index/mail-index-map.c, inside the function mail_index_map_move_to_memory, there is: mail_index_map_copy_header(map, map); Valgrind is stating that "Source and destination overlap in memcpy". I'm wondering if this code is just coping the same memory over itself, or if it is doing something useful. Regards, Diego Liziero. --- 1104 void mail_index_map_move_to_memory(struct mail_index_map *map) 1105 { 1106 struct mail_index_record_map *new_map; 1107 1108 if (map->rec_map->mmap_base == NULL) 1109 return; 1110 1111 i_assert(map->rec_map->lock_id != 0); 1112 1113 new_map = array_count(&map->rec_map->maps) == 1 ? map->rec_map : 1114 mail_index_record_map_alloc(map); 1115 1116 mail_index_map_copy_records(new_map, map->rec_map, 1117 map->hdr.record_size); 1118 mail_index_map_copy_header(map, map); 1119 1120 if (new_map != map->rec_map) { 1121 mail_index_record_map_unlink(map); 1122 map->rec_map = new_map; 1123 } else { 1124 mail_index_unlock(map->index, &new_map->lock_id); 1125 if (munmap(new_map->mmap_base, new_map->mmap_size) < 0) 1126 mail_index_set_syscall_error(map->index, "munmap()"); 1127 new_map->mmap_base = NULL; 1128 } 1129 }

2 4

[Dovecot] Automatic Debian repository with packages for Dovecot-1.1 including Sieve and ManageSieve support.
by Stephan Bosch 10 Mar '08

10 Mar '08

Hello Dovecot users, For those of you who like to live on the edge, there is now a Debian-testing repository available with hourly updates from recent Dovecot-1.1 changes in the Mercurial repositories. It automatically releases a new set of packages if it notices any changes in any of the repositories. The packages are built with dovecot-sieve-1.1 and dovecot-1.1-managesieve included. Currently, it only provides binaries for the i386 architecture and no source packages are available. The small Debian-specific patches that are included in the official Debian packages are currently not included for this repository. Also, the packages are currently not PGP signed. I've built this repository to obtain continuous updates on whether the managesieve patch and package still compile and work with the latest Dovecot release. I get an e-mail if anything goes wrong during the build. I implemented the cron script right at the release of dovecot-1.1.rc1 and now that it successfully upgraded the package versions to 1.1.rc2, I decided to release the repository to the world. Needless to say: do **NOT** use this repository for systems that need to be **STABLE**. Usage should be similar to the backports.org repository (http://www.backports.org/dokuwiki/doku.php?id=instructions) but add the following line to your /etc/apt/sources.list: deb http://xi.rename-it.nl/debian/ testing-auto main Package versions look as follows: 1:<upstream-version>~auto+<build number> Current latest version: 1:1.1.rc2~auto+1 For questions, comments and requests, you can send me an e-mail. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

2 2

[Dovecot] Telephone systems and Dovecot
by Jonathan Knight 10 Mar '08

10 Mar '08

Hi folks, We're looking to integrate our telephone system with our email system. The telephone system will use IMAP4 to store WAV files in a users mailbox and then retrieve them for playing if necessary. This is usually called "unified messaging". The manufacturers are claiming full integration with Microsoft Exchange and Lotus Notes using IMAP4 and a single username and password to access all the users mailboxes. I can see that Dovecot has a master user feature that looks like it will do the job. Has anyone had any experience of using dovecot as a unified message server for a telephone system and has anyone any experience of configuring dovecot so that an MS exchange IMAP4 client using a master user can use dovecot without changing the client? Jon.

3 4

[Dovecot] newbie question dovecot and ldap
by Joseph Norris 09 Mar '08

09 Mar '08

Hello, Please let me know how I can troubleshoot this - driving me crazy! I have the following dovecot-ldap.conf file: hosts = ldap.ucmerced.edu dn=cn=natsciadmin,ou=Special Users,dc=ucmerced,dc=edu dnpass=******** ldap_version = 3 base = ou=People,dc=ucmerced,dc=edu deref = never scope = subtree user_attrs = uid user_filter = (&(ou=Natural Sciences)(organizationalStatus=active)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(ou=Natural Sciences)(organizationalStatus=active)(uid=%u)) default_pass_scheme = CRYPT I am getting the following errors in my log for my test user: Mar 7 11:09:44 malaga dovecot: auth(default): LDAP: binding failed (dn cn=natsciadmin,ou=Special Users,dc=ucmerced,dc=edu): No such object Mar 7 11:10:26 malaga dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=169.236.129.236 rip=169.236.128.182 Mar 7 11:10:26 malaga dovecot: auth(default): client out: CONT 1 Mar 7 11:10:26 malaga dovecot: auth(default): client in: CONT 1 AGpub3JyaXMAQSR0cjAxZGtpbGxlcg== Mar 7 11:10:28 malaga dovecot: auth(default): pam(jnorris,169.236.128.182): pam_authenticate() failed: Authentication failure Mar 7 11:10:28 malaga dovecot: auth(default): passwd(jnorris,169.236.128.182): password mismatch Mar 7 11:10:28 malaga dovecot: auth(default): ldap(jnorris,169.236.128.182): pass search: base=ou=People,dc=ucmerced,dc=edu scope=subtree filter=(&(ou=Natural Sciences)(organizationalStatus=active)(uid=jnorris)) fields=uid,userPassword Mar 7 11:10:28 malaga dovecot: auth(default): LDAP: binding failed (dn cn=natsciadmin,ou=Special Users,dc=ucmerced,dc=edu): No such object Mar 7 11:10:30 malaga dovecot: auth(default): client out: FAIL 1 user=jnorris temp Mar 7 11:10:30 malaga dovecot: auth(default): client in: AUTH 2 PLAIN service=IMAP secured lip=169.236.129.236 rip=169.236.128.182 resp=AGpub3JyaXMAQSR0cjAxZGtpbGxlcg== -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

3 3

[Dovecot] v1.1.rc2 released
by Timo Sirainen 09 Mar '08

09 Mar '08

http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc2.tar.gz http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc2.tar.gz.sig Changes since rc1: * mail_extra_groups setting was commonly used insecurely. This setting is now deprecated. Most users should switch to using mail_privileged_group setting, but if you really need the old functionality use mail_access_groups instead. + Expire plugin now supports wildcards in mailbox names. + dbox: Expire plugin supports moving old mails to alternative dbox directory + Maildir++ quota: quota_rule=?:<rule> specifies a default rule which is used only if the maildirsize file doesn't exist. + If SSL/TLS connection isn't closed cleanly, log the last error in the disconnection line. + EXPUNGE: If new \Deleted messages were found while expunging, do it again and expunge them as well (Outlook workaround) - IMAP: SEARCH, LIST and THREAD command correctness fixes - Maildir++ quota: Quota rules and warnings with % rules didn't work if the default limits were taken from maildirsize file. - Maildir++ quota: If both byte and message limits weren't specified, maildirsize file was recalculated all the time - mbox: Flag and keyword updates may have gotten lost in some situations (happens with v1.0 too) - ldap: Don't crash if userdb lookup fails - Squat fixes and performance improvements Things left to do for v1.1.0: - dbox has a metadata corruption bug, find and fix it - Squat has some locking issues that causes errors when stress testing with multiple connections - Squat doesn't do NFS cache flushing and has some other NFS problems.

4 22

[Dovecot] v1.0.13 and v1.1.rc3 released
by Timo Sirainen 09 Mar '08

09 Mar '08

http://dovecot.org/releases/1.0/dovecot-1.0.13.tar.gz http://dovecot.org/releases/1.0/dovecot-1.0.13.tar.gz.sig http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc3.tar.gz http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc3.tar.gz.sig Note that the changes for the security hole fix were quite large. I tested with several auth configurations myself and they seemed to work, but it's possible I left a bug somewhere in there breaking someone's configuration. So make sure to test that it works after upgrading. Of course it would be really nice if Dovecot had a proper test suite where testing all configurations could be automated and run before each release. I've already started this with my imaptest tool (http://imapwiki.org/ImapTest) but it only does IMAP tests and a lot of things are still missing. Some help would be nice here. * Fixed a security hole in blocking passdbs (MySQL always. PAM, passwd and shadow if blocking=yes) where user could specify extra fields in the password. The main problem here is when specifying "skip_password_check" introduced in v1.0.11 for fixing master user logins, allowing the user to log in as anyone without a valid password. - mail_privileged_group was broken in some systems (OS X, Solaris?) - IMAP THREAD: Fixed some correctness problems

1 0

[Dovecot] Security hole #6: Some passdbs allowed users to log in without a valid password
by Timo Sirainen 09 Mar '08

09 Mar '08

This affects only blocking passdbs: - MySQL - PAM, passwd and shadow if blocking=yes The underlying bug exists in all v1.0.x versions, but I couldn't figure out a way to exploit it except with v1.0.11, v1.0.12 and v1.1.rc2. Probably a good idea to upgrade in any case. The main problem is that Dovecot's internal protocols use TAB character as a delimiter, but passwords were sent unescaped through them. So passwords containing TAB characters allowed to add new internal fields. The main problem here is a new "skip_password_check" field added in v1.0.11 to fix problems with master user logins. Specifying this field allowed the user to skip the password check, as the name implies. This has been fixed thoroughly in v1.0.13 and v1.1.rc3 to make sure there are no more escaping problems with any fields, but it can be also fixed with a less intrusive patch for v1.0: http://hg.dovecot.org/dovecot-1.0/raw-rev/da2a9372e26e

1 0

[Dovecot] Quota Problem?
by Michel Vega Fuenzalida 08 Mar '08

08 Mar '08

Good list I am not very good with English. I use dovecot-1.0-1.2.rc15.el5.x86_64rpm for Centos 5.1, Maildir like mailbox and I have it configured as it continues: base_dir = /var/run/dovecot/ protocols = imaps pop3s imap mail_location = maildir:~/Maildir protocol imap { mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/imap } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota mail_plugin_dir = /usr/lib/dovecot/pop3 } log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " syslog_facility = mail auth default { mechanisms = plain #login digest-md5 cram-md5 passdb pam { } userdb passwd { } user = root } plugin { quota = maildir quota = maildir:ignore=Trash } the problem resides in the quota, when I make: #du - sh /home/muti/Maildir/ 160M /home/michelvf/Maildir/ And in the file /home/muti/Maildir/maildirsize appears: 204800000S 138594655 4180 This doesn't belong together with the real size of the mailbox. That is to say that it is not real, is this normal? or I have not well configured dovecot.conf, I really want that through the file maildirsize, to have control of the quota. Greetings -- Usemos el Software Libre "Con todos y para el bien de todos." Jose Marti, 26 de noviembre de 1891, Tampa. Michel Vega Fuenzalida. Usuario Linux: 353763 (http://counter.li.org) Coordinador Grupo: Linux-Pinero. Administrador de Red. ELAM "Clara Zetkin" Teléfono: 53 (01) 52193107 ext 115. Isla de la Juventud. Cuba.

2 1

[Dovecot] IPv6-enabled dovecot-1.1rc* does not accept IPv4-connections
by Bernhard Schmidt 08 Mar '08

08 Mar '08

Hi, I'm having a really really strange problem. After upgrading from 1.1.beta13 to 1.1.rc2 (happened with rc1 as well IIRC) I can't connect to the services using IPv4 anymore. dovecot happily binds to the IPv6 wildcard socket which should accept IPv4 connections as well. root@vs02:~# netstat -lnp --tcp | grep dovecot tcp6 0 0 :::993 :::* LISTEN 30758/dovecot tcp6 0 0 :::995 :::* LISTEN 30758/dovecot tcp6 0 0 :::110 :::* LISTEN 30758/dovecot tcp6 0 0 :::143 :::* LISTEN 30758/dovecot root@vs02:~# telnet ::1 110 Trying ::1... Connected to ::1. Escape character is '^]'. +OK Dovecot ready. quit +OK Logging out Connection closed by foreign host. root@vs02:~# telnet 127.0.0.1 110 Trying 127.0.0.1... telnet: Unable to connect to remote host: Connection refused root@vs02:~# /sbin/stop dovecot dovecot (stop) running, process 30758 dovecot (stop) pre-stop, (main) process 30758 dovecot (stop) stopping, process 30758 dovecot (stop) killed, process 30758 dovecot (stop) post-stop dovecot (stop) waiting # downgrading root@vs02:~# dpkg -i dovecot_1.1.beta13-1_amd64.deb dpkg - warning: downgrading dovecot from 1.1.rc2-1 to 1.1.beta13-1. (Reading database ... 20504 files and directories currently installed.) Preparing to replace dovecot 1.1.rc2-1 (using dovecot_1.1.beta13-1_amd64.deb) ... Unpacking replacement dovecot ... Setting up dovecot (1.1.beta13-1) ... Installing new version of config file /etc/dovecot/dovecot-sql-example.conf ... Installing new version of config file /etc/dovecot/dovecot-ldap-example.conf ... Installing new version of config file /etc/dovecot/dovecot-example.conf ... root@vs02:~# /sbin/start dovecot dovecot (start) waiting dovecot (start) starting dovecot (start) pre-start, process 30816 dovecot (start) spawned, process 30818 dovecot (start) post-start, (main) process 30818 dovecot (start) running, process 30818 root@vs02:~# netstat -lnp --tcp | grep dovecot tcp6 0 0 :::993 :::* LISTEN 30818/dovecot tcp6 0 0 :::995 :::* LISTEN 30818/dovecot tcp6 0 0 :::110 :::* LISTEN 30818/dovecot tcp6 0 0 :::143 :::* LISTEN 30818/dovecot root@vs02:~# telnet 127.0.0.1 110 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. +OK Dovecot ready. quit +OK Logging out Connection closed by foreign host. I built the packages myself, both (beta13 and rc2) with the options --without-passwd --without-passwd-file --without-shadow --without-pam --without-gssapi --without-vpopmail --with-ldap --without-checkpassword --without-nss --with-deliver --with-ioloop=epoll --with-storages=maildir,raw --sysconfdir=/etc/dovecot Anyone having an idea? Thanks, Bernhard

2 4

[Dovecot] dovecotpw
by Brent Clark 08 Mar '08

08 Mar '08

Hi I would like to simulate dovecot's dovecotpw with a perl script I tried / used use Crypt::SaltedHash; my $csh = Crypt::SaltedHash->new(algorithm => 'SHA-1'); $csh->add($passwd_string); my $salted = $csh->generate; also use Digest::SHA1; use MIME::Base64; $ctx = Digest::SHA1->new; $ctx->add($passwd_string); $ctx->add('salt'); my $salted = '{SSHA}' . encode_base64($ctx->digest . 'salt' ,''); But it doesnt work. Basically what im doing is authenticating against a mysql db. If i do a dovecotpw -s SSHA -p password and update the DB, then the mail client authenticates perfectly. If anyone can help, it would be most appreciated. Kind Regards Brent Clark

2 3

[Dovecot] dovecot and ldap config - getting no password in reply
by Joseph Norris 08 Mar '08

08 Mar '08

I almost go this liked but then I get the following: Mar 7 18:09:43 malaga dovecot: auth(default): ldap(jnorris,76.20.83.98): pass search: base=ou=People,dc=ucmerced,dc=edu scope=subtree filter=(&(uid=jnorris)) fields=uid,userPassword Mar 7 18:09:43 malaga dovecot: auth(default): ldap(jnorris,76.20.83.98): result: uid(user)=jnorris Mar 7 18:09:43 malaga dovecot: auth(default): ldap(jnorris,76.20.83.98): No password in reply Mar 7 18:09:45 malaga dovecot: auth(default): client out: FAIL 2 user=jnorris temp What am I missing in my conf files? -- Cell: 209.201.3410 Desk: 209.228.4576 email: jnorris(a)ucmerced.edu #Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?) print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11, 16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68, -26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);

3 2

[Dovecot] User another userdb to sasl
by Nicolas Letellier 08 Mar '08

08 Mar '08

Hello, I use Dovecot 1.0.12 with Postfix on FreeBSD. It works perfectly, but I have a question. My users are virtual (stocked in a MySQL database). I use SASL Dovecot authentification, and SASL uses my userdb (for POP/IMAP access). However, I would like my users have an other login/password to send email with SMTP/SASL. Or, I don't want my users use the same login/password for POP/IMAP than SMTP. More, I don't want some users could send emails with their login/password, but I want they can fetch their mails. I'm looking for an option in my dovecot.conf to specifie a table SQL for SASL authentification (and don't use same table SQL than IMAP/POP access). How I could do for this problem? Do you have an idea? Or, simply, is it possible with Dovecot SASL? I read all Dovecot wiki, with no results... Thanks very much. Nicolas

4 3

[Dovecot] limit numbers of fails logins
by Federico Nan 07 Mar '08

07 Mar '08

Hi!! i want to limit the retry of the login process if the password dosent match. i use dovecot gssapi login plugin. if a user put your password wrong twice, i want dovecot ban that user for a while o something like that, its that possible?? thanks a lot!!! sorry my english! -- Federico Nan Nantec.net federico(a)nantec.net

2 1

[Dovecot] Can't load private key file
by adamsh＠fsfa.org 07 Mar '08

07 Mar '08

Hi Guys, I have just purchased and installed an authenticated certificate for the mail server, but I am getting errors from dovecot. My mail.err file is showing the following. Mar 7 17:56:04 mailserver dovecot: pop3-login: Can't load private key file /etc/ssl/mailserver/mail.mydomain.tld.key: error:0906A068:PEM routines:PEM_do_header:bad password read My dovecot.conf has the following set. # Uncomment these if using SSL ssl_cert_file = /etc/ssl/mailserver/mail.mydomain.tld.crt ssl_key_file = /etc/ssl/mailserver/mail.mydomain.tld.key #ssl_key_password = #ssl_ca_file = /etc/ssl/mailserver/ca/mydomain.pem #ssl_verify_client_cert = yes ssl_parameters_regenerate = 168 verbose_ssl = no I have been playing about with it all for about 3 hours now and would greatly appreciate any help ;) Regards Adam -------------------------------------------------------------------- myhosting.com - Premium Microsoft® Windows® and Linux web and application hosting - http://link.myhosting.com/myhosting

2 1

[Dovecot] Building Dovecot with OpenLDAP break PAM LDAP on Solaris
by Laurent Blume 07 Mar '08

07 Mar '08

Hi all, I'm back with more data on a problem Iposted about one month ago. To sum it up, my Solaris 10 box has local accounts as well as LDAP ones via PAM. They work well as-is, with no special configuratio, for WU IMAP (using the «other» entry in pam.conf. When I tried a self-built Dovecot, all accounts were authenticated without problem. Then I tried the Blastwave version, same release, but with more option, and this one didn't work with the exact same configuration: local accounts were authenticated, not the PAM LDAP ones. Now, it turns out that when Dovecot is built using OpenLDAP, then PAM LDAP account won't work. If it's built with Solaris LDAP, they work, everything else being equal. Is there any way to fix that? There's the Blastwave bug report with more details if needed: http://www.blastwave.org/mantis/view_bug_page.php?f_id=0002760 Thanks in advance for any help, Laurent -- / Leader de Projet & Communauté | I'm working, but not speaking for \ G11N http://fr.opensolaris.org | Bull Services http://www.bull.com / FOSUG http://guses.org |

2 2

[Dovecot] Squat Indexing
by Jeff Grossman 07 Mar '08

07 Mar '08

I tried Squat indexing on my very small home system and when I did a body search in Thunderbird, I got a TON, and I mean TON, of these messages in my log file: Mar 6 06:13:31 apple dovecot: child 14142 (imap) killed with signal 6 Mar 6 06:13:31 apple dovecot: IMAP(jeff): file file-lock.c: line 112: unreached Mar 6 06:13:31 apple dovecot: IMAP(jeff): Raw backtrace: imap [0x482771] -> imap [0x482166] -> imap [0x484d86] -> imap(file_wait_lock+0x35) [0x484ef5] -> /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so [0x2b4664a69a0c] -> /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so [0x2b4664a6a99b] -> /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so(squat_trie_get_last_uid+0x4c) [0x2b4664a6ac1c] -> /usr/local/lib/dovecot/imap/lib20_fts_plugin.so [0x2b4664862d0b] -> /usr/local/lib/dovecot/imap/lib20_fts_plugin.so [0x2b4664863bb3] -> imap(cmd_search+0xd9) [0x41b909] -> imap(cmd_uid+0x52) [0x41ca12] -> imap [0x41d348] -> imap [0x41d3e9] -> imap [0x41db5f] -> imap(client_input+0x5f) [0x41dd8f] -> imap(io_loop_handler_run+0xf8) [0x4894c8] -> imap(io_loop_run+0x1d) [0x4887ad] -> imap(main+0x3c2) [0x424f52] -> /lib/libc.so.6(__libc_start_main+0xf4) [0x2b466451e1c4] -> imap [0x417df9] This is with version 1.1rc1. Here is a copy of my dovecot -n: # 1.1.rc1: /usr/local/etc/dovecot.conf base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/stikman-godaddy.crt ssl_key_file: /etc/ssl/private/stikman-godaddy.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes mail_extra_groups: mail mail_location: maildir:~/Maildir dotlock_use_excl: no fsync_disable: yes lock_method: dotlock maildir_copy_with_hardlinks: no mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): fts fts_squat mail_plugins(imap): fts fts_squat mail_plugins(pop3): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd plugin: fts: squat

2 2

[Dovecot] Squat performance
by Timo Sirainen 07 Mar '08

07 Mar '08

The initial building (and an occational compression) performance just got a major boost. I knew there was a problem there, but I hadn't realized it was this easy to fix: http://hg.dovecot.org/dovecot-1.1/rev/4445415da4ff My 1,4 GB test lkml mbox can be now indexed in 7 minutes, doubling the speed form earlier 14 minutes. I added some more benchmark results here: http://wiki.dovecot.org/Plugins/FTS So the initial Squat index building is about 2-3x slower than the non-indexed search. I think that's pretty good. Also I think it means that the non-indexed search code could be optimized more. :) Maildir test shows that it indexes about 5 MB/CPUsec. My earlier tests showed that it indexed 8-10 MB/CPUs when feeding data directly to it, so 3-5 MB/CPUs is going elsewhere, probably to message parsing and charset conversions and such..

1 0

[Dovecot] Upgrading from 0.99.10.5 to 1.1
by Anders 07 Mar '08

07 Mar '08

Hi, I am upgrading a setup from Dovecot 0.99 to 1.1. There are a bunch of .imap.index* files that it appears that I can just delete, and they will be recreated as dovecot.index* files. Right? Next, there are some .customflags that I have now learned are not being converted to dovecot-keywords (as we skipped the 1.0 version, and the conversion code appears to be removed in 1.1). Is there some way to convert this? Is it just a rename? Thanks, Anders.

2 2

[Dovecot] Deliver question
by Dien Phan 07 Mar '08

07 Mar '08

Hi, I searched whole 2007-2008 mailing lists for answer but couldn\'t find. I think it\'s easier and quicker to ask here. Suppose I have a message saved in file /tmp/afile. How can I tell deliver to deliver it to user\'s abc(a)domain.com mail box SPAM? I tried two following ways but no success: 1. more /tmp/afile | deliver -d abc(a)domain.com -m SPAM 2. deliver -d abc(a)domain.com -m SPAM < /tmp/afile Thank you for help. --------------- Thư điện tử tiếng Việt, đơn giản và thuận tiện: http://mail.vn-mail.net

2 1

[Dovecot] Future enhancement of imap: sorting?
by Andy Dills 07 Mar '08

07 Mar '08

After solving a problem with a sweet little application I discovered (more on that below), I wanted to get some feedback about a potential enhancement for IMAP: standardized, MUA independant, server-side sorting. Currently, there are two basic solutions for sorting: handle it during delivery or handle it in the MUA. However, if you handle it in the MUA, you lose some of the client independancy and portability that imap was designed to address, as there is no mechanism to sync sorting rules between clients, and many lightweight clients don't support sorting at all. On the flip side, in distributed mail envrionments sorting at delivery time isn't feasible, as you typically have the entire mailspool owned by a single UID and mounted via NFS. My basic point is that the two paradigms for sorting have fundemental flaws that severaly limit them. It occured to me that it would be ideal to enable sorting in the imap daemon, enabling users to implement sorting rules which are stored in their directory (similar to the other imap metadata), and which get invoked whenever mail is checked. Perhaps that is beyond the reasonable scope of the imap protocol, but in my mind sorting is a critical task that is poorly addressed and needs to be standardized. I'd love to hear opinions on this. See, in our mail cluster environment, it's basically impossible to use procmail without forwarding your mail to our shell server (nor are we able to use the dovecot LDA). So, the question presented to me by one of my business partners was, since Outlook was shortsighted and didn't include the ability to sync sorting rules between clients, nor did they implement sorting functionality whatsoever on the windows mobile version, what options does he have to ensure proper sorting of his mail without having to leave outlook running 24x7? He doesn't want to have to wade through mailing list email on his mobile outlook, nor does he want to have to ensure his filter rules are consistent in both his outlook and our webmail. So, I poked around in the ports tree, and found a gem: imapfilter. http://imapfilter.hellug.gr/ It's configured via lua, supports a very rich array of actions and queries, and has proven to be very robust and lightweight. I helped him get started with some sample rules, added it to run every minute as a cron job, and boom: robust, fully featured, MUA independant filtering in an environment that can't support procmail or the dovecot LDA. As nice as it is, it's still a personal solution. In my mind we need to have standardized, server-side, MUA-independant sorting rules that get invoked when a mailbox is checked. Thoughts? Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

2 5

[Dovecot] Outlook 2003 marks email for deletion
by Jan van den Berg 07 Mar '08

07 Mar '08

Hi, Im running Dovecot 1.1RC1 (only IMAP). I noticed that when I connect with Outlook 2003; and I start reading new email some mails get marked (completely random) for deletion (,S -> ,ST) ?? I can set this mail to unread, undo the deletion read it again and it will stay OK. But other emails will still get marked. This only seems to happen with Outlook 2003 not with Outlook Express or Thunderbird and only with new unread mail. Any ideas why Outlook marks this mail for deletion? Cheers, Jan

3 3