- dovecot - dovecot.org

[Dovecot] dovecot dies - mabye a clue?
by Steven Stern 26 Apr '04

26 Apr '04

Dovecot died twice today. This was in the maillog: Apr 9 17:50:27 ciscy pop3-login: RAND_bytes() failed: error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded Apr 9 17:50:27 ciscy dovecot: Login process died too early - shutting down I think I can cause it to happen reliably and I'm asking for other to test this scenario: Open several terminal windows. In each, type "telnet 127.0.0.1 110". Wait for the dovecot POP prompt and do nothing. After each times out, up-arrow and try again. Sometime in the next hour, dovecot will die. -- Steve

2 1

[Dovecot] file permissions help!
by smk 26 Apr '04

26 Apr '04

Hi all! Ran into a problem and hopefully i can get some help. OK here is my set up: - dovecot-0.99.10.4 + MySQL patch. - Redhat 9 The authentication part works just fine. It gives me the following entry in the log file: imap-login: "Apr 12 22:15:10 "Info: Login: USER(a)DOMAIN.com [127.0.0.1] But there is a problem with dovecot reading the mbox file (I think). In the error file I get this entry: imap(USER(a)DOMAIN.com): "Apr 12 22:15:10 "Fatal: Failed to create storage with data: /export/htdocs/DOMAIN.com/mail/USER dovecot: "Apr 12 22:15:11 "Error: child 18613 (imap) returned error 89 Of course the user and domain info was changed. I am out of ideas but thats not to say its something easy or something I completely looked over. This is how I compiled dovecot: CPPFLAGS="-I/usr/local/mysql/include/mysql -DPASSDB_MYSQL -DUSERDB_MYSQL" \ LDFLAGS="-L/usr/local/mysql/lib/mysql/ -lmysqlclient" \ \ ./configure \ --prefix=/usr/local/imapd \ --disable-ipv6 \ --without-pop3d \ --without-ssl \ --with-storages=mbox \ --enable-debug thanks in advance. Scott

2 1

[Dovecot] Problem with flags
by Jeff Hoskinson 26 Apr '04

26 Apr '04

Greetings! I'm having a problem with flags not working correctly. I'm using Mozilla Thunderbird as my mail client, and Dovecot 0.99.10.4 as part of Debian on a Sparc box. The thing that doesn't seem to be working right is Thunderbird's Label feature, which uses custom IMAP flags. I noticed that once I labeled a message, I couldn't un-label it. I recorded this exchange between Thunderbird and Dovecot while using the Label/None command on a message: 5235 uid store 35 -Flags ($Label1 $Label2 $Label3 $Label4 $Label5) * 35 FETCH (FLAGS (\Answered \Seen NonJunk $Label4 $Label5) UID 35) 5235 OK Store completed. Even though Thunderbird is sending the -Flags command for all its custom flags, the message is still retaining two of those flags. Just out of curiousity, I tried changing the flag of that same message to something different, and recorded this exchange: 5259 uid store 35 +Flags ($Label2) * 35 FETCH (FLAGS (\Answered \Seen NonJunk $Label4 $Label2 $Label5) UID 35) 5259 OK Store completed. 5260 uid store 35 -Flags ($Label1 $Label3 $Label4 $Label5) * 35 FETCH (FLAGS (\Answered \Seen NonJunk $Label4 $Label2 $Label5) UID 35) 5260 OK Store completed. So it seems the +Flags command works, but not the -Flags? Or does it have something to do with sending more than one flag at a time? Any help would be appreciated. Thanks, -- Jeff

2 1

[Dovecot] [OT] Is there a secure reverse IMAP proxy
by Sven Kirmess 26 Apr '04

26 Apr '04

This question is off topic. I ask this list because the question is related to security and IMAP and I guess the people in this list know a lot about both of that. Is there a secure reverse proxy for the IMAP protocol? Something you can install on a bastion host which checks the IMAP traffic before forwarding it to the internal IMAP server? There are these proxies for WebMail to IMAP connections but as far as I can tell they were not created for security reasons and not with security as primary goal. Sven

3 2

[Dovecot] SSL Ciphers
by John Wentworth 26 Apr '04

26 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

2 1

[Dovecot] problems with squirrelmail and TLS (debian unstable)
by Amelia A Lewis 26 Apr '04

26 Apr '04

Heylas, So, okay, I've had this lovely IMAP server running, and adore the ease of configuration, among other things. Problem, though. I'm trying to set up SquirrelMail, so that some folks with accounts on my box can use it without having to set up a proper imap client (or can check mail when they're at a cafe, or like that). However, I *won't* turn off the disable_plaintext_auth, 'cause I'm damned if I'll set up a box that asks people to send passwords in the clear, and there *are* people using imap. Dovecot cannot, currently, be configured to permit plaintext on localhost while requiring Something Better from the rest of the world. This becomes a problem with SquirrelMail, which can't cope with TLS. It just barfs. Looking at bug reports in debian, this has already been noticed, and the maintainer there (and the maintainers of SquirrelMail) considers this a non-problem, 'cause, they say, you shouldn't be using TLS with webmail. Is there a way to set up, for instance, two instances of dovecot, running on different ports, so that one listens to the external interface and the other listens to localhost? I don't much like the idea, but how would I go about doing this? Two copies of dovecot.conf and a command-line switch? Amy! -- Amelia A. Lewis amyzing {at} talsever.com Yankees are compelled by some mysterious force to imitate Southern accents and they're so damn dumb they don't know the difference beween a Tennessee drawl and a Charleston clip. -- Rita Mae Brown, "Rubyfruit Jungle"

4 4

[Dovecot] error dropping root group priv
by Thomas Abthorpe 24 Apr '04

24 Apr '04

Good morning all, I am new to this list. I have been running FreeBSD 5.1 with dovecot successfully for about a year. Just recently, I built a new machine with 5.2.1-p5 on the Intel platform with dovecot-0.99.10.4_2. When I use the same configuration options on the new machine, I get Apr 24 10:53:59 standrew pop3-login: Login: tabthorpe [172.16.1.100] Apr 24 10:53:59 standrew pop3(tabthorpe): We couldn't drop root group privileges Apr 24 10:53:59 standrew dovecot: child 44134 (pop3) returned error 89 Any suggestion? Thanks in advance. Thomas -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Postmaster http://www.stthomasanglican.org

1 0

[Dovecot] SSL Ciphers
by John Wentworth 23 Apr '04

23 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

1 0

[Dovecot] SSL Ciphers
by John Wentworth 23 Apr '04

23 Apr '04

I have dovecot running as a pop3s server on port 995 it works great with sendmail and I run nessus to check security issues nessus reports this The SSLv2 server offers 3 strong ciphers, but also 0 medium strength and 2 weak "export class" ciphers. The weak/medium ciphers may be chosen by an export-grade or badly configured client software. They only offer a limited protection against a brute force attack Solution: disable those ciphers and upgrade your client software if necessary I have previously disabled weak ciphers in apache but cannot figure out how to disable the weak ciphers in dovecot Any help would be appreciated john

1 0

[Dovecot] Is dovecot distributed with RHEL 3.0
by Avery 20 Apr '04

20 Apr '04

I can't seem to find out if dovecot is packaged with RHEL 3.0. It seems redhat makes it hard to find what packages you get when you purchase their RHEL. Does anyone know if dovecot is disributed with Red Hat Enterprise Linux ES 3.0? I know dovecot is distribured with redhat 9.0 and fedora. Thanks, -- Avery

4 3