- dovecot - dovecot.org

Identify mail for attachment hash
by Daniel Miller 06 Mar '15

06 Mar '15

How can I find the message associated with a given attachment hash? For example, if I know that: /ff/23/ff23873c712474ad0f48cbd81485eaeaba3d8468-e1b4513a2eb8eb53b16400009db5accb is missing, I want to find the message associated with it so I can determine if it's critical and I need to recover it from another source, or if I can simply delete the old message. -- Daniel

1 0

Sieve editheader should support adding Received and Auto-Submitted headers
by Lee Maguire 06 Mar '15

06 Mar '15

In order to simplify auto-response suppression and other filtering, I want to synthesise an Auto-Submitted header on notification mails that should have them but do not. In a sieve file I add the following: if anyof ( header :contains ["From","Sender"] “info(a)example.com" ) { if header :contains "Subject" [" just joined "," just left "] { if not exists "Auto-Submitted" { addheader "Auto-Submitted" "auto-generated (via sieve)"; } } However this doesn’t work and results in the following error > main script: line 205: warning: addheader action: specified header field `Auto-Submitted' is protected; modification denied. (Workaround for this specific issue would probably be to use a List-* header instead.) Looking at http://hg.rename-it.nl/dovecot-2.2-pigeonhole/file/c8edece267cd/src/lib-sie… I can see that "Auto-Submitted” and “Received” are hardcoded to be blocked without reference to whether they are to be added or removed. However, the hard restriction in RFC 5293 on Auto-Submitted and Received only applies to the use of deleteheader and not addheader. https://tools.ietf.org/html/rfc5293#section-6 > As a matter of local policy, implementations MAY limit which header > fields may be deleted and which header fields may be added. However, > implementations MUST NOT permit attempts to delete "Received" and > "Auto-Submitted" header fields and MUST permit both addition and > deletion of the "Subject" header field. Using Dovecot version 2.1.7 but I assume it’s not version specific issue.

2 1

LMTP error: Too many concurrent deliveries for user (in reply to end of DATA command)
by Ralf Hildebrandt 06 Mar '15

06 Mar '15

I updated dovecot today and all over a sudden I'm getting: Mar 6 14:40:46 mail postfix/lmtp[3150]: 3kz95y3nX3zCtTS: to=<recipient(a)backup.invalid>, relay=127.0.0.1[private/dovecot-lmtp], delay=88, delays=87/0.94/0.01/0.01, dsn=4.3.0, status=deferred (host 127.0.0.1[private/dovecot-lmtp] said: 451 4.3.0 <recipient(a)backup.invalid> Too many concurrent deliveries for user (in reply to end of DATA command)) Why is that? Which setting must I tweak? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 6

IP drop list
by Jim Pazarena 05 Mar '15

05 Mar '15

I wonder if there is an easy way to provide dovecot a flat text file of ipv4 #'s which should be ignored or dropped? I have accumulated 45,000+ IPs which routinely try dictionary and 12345678 password attempts. The file is too big to create firewall drops, and I don't want to compile with wrappers *if* dovecot has an easy ability to do this. If dovecot could parse a flat text file of IPs and drop connections it would sure put a dent in these attempts. Thanks.

15 28

Fwd: Re: IP drop list
by Jim Pazarena 05 Mar '15

05 Mar '15

On 2015-03-02 2:02 AM, Jochen Bern wrote: > On 03/01/2015 08:53 AM, Jim Pazarena wrote: >> I wonder if there is an easy way to provide dovecot a flat text file of >> ipv4 #'s which should be ignored or dropped? >> >> I have accumulated 45,000+ IPs which routinely try dictionary and >> 12345678 password attempts. The file is too big to create firewall >> drops [...] > > The inherent assumption here is that dovecot, using a "flat file", will > be able to process the block list more effectively than the firewall, > which is a tool written for the *purpose* but supposedly unable to even > *try* due to the list's size. That sounds ... counterintuitive. I am the original poster and just came back to this thread. When the first couple replies were "fail2ban" I lost interest. The reason I contemplated a flat text scan by dovecot is because, for the most part, my dovecot is low volume. So even if parsing a flat text file is less 'efficient' than a firewall insertion, it WOULD serve to defeat dictionary attacks rather readily. I already have a routine which scans my dovecot logs for goofy attacks such as dictionary or 12345 attempts. And since the attacks are pop/IMAP only, that is the only avenue which I wanted to defeat. This question garnered lots and lots of responses and I appreciate them all and read them all. And out of all the responses I think I will pursue the ipset routine. It seems easy enough and can act at the firewall level. The DNS RBL would be cool. I am also cognizant that 45,000 SHOULD have a TTL. However, these were IPs attempting to fetch email with obviously hacker type passwords. If, later, a given IP is re-assigned to a 'legitimate' person, they would still be able to send an email to me ' postmaster@ ' asking about an inability to fetch email. But parsing the flat text file would STILL be my preference. I'll look at the source and see if I can figure out where to inject such code. Like I said, my dovecot is low volume, so a fraction of a second at connection time is low impact. Considering that the flat text file may hang around in the memory cache it could even be less impact than low.

4 3

Receiving emails problem
by Gintare Ragaisiene 05 Mar '15

05 Mar '15

Hello, I have DirectAdmin system installed with CentOS OS. I created a user and a user email account. Then I tried to send email from my website (which is written on PHP5) to my mailbox. Everything seemed ok, but I did not received letter on the mailbox. The same is wehen I am trying to send through webmail SquirrelMail. I got a record on var/log/mailog: Mar 5 17:07:15 432282 dovecot[535]: imap-login: Login: user=<gintare>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=7134, secured, session=<Rdpd7IsQhgB/AAAB> Mar 5 17:07:15 432282 dovecot[535]: imap(gintare): Disconnected: Logged out in=79 out=766 Please, help me. Versions: DirectAdmin - 1.4 CentOS - 6.6 Dovecot - 2.2.15 SquirrelMail (wbmail) - 1.4.23 Thanks, Gintare

2 1

Dovecot Full Text Search: HTTP 500 : Unknown fieldType 'text_general' specified on field text. [SERIOUS]
by Kevin Laurie 05 Mar '15

05 Mar '15

Hi Muzzafer, I get the error as specified below when i try to added it in as a field:- I dont think text_general is a valid field? HTTP ERROR 500 Problem accessing /solr/. Reason: {msg=SolrCore 'collection1' is not available due to init failure: Could not load conf for core collection1: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml,trace=org.apache.solr.common.SolrException: SolrCore 'collection1' is not available due to init failure: Could not load conf for core collection1: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml at org.apache.solr.core.CoreContainer.getCore(CoreContainer.java:745) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:307) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:207) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1075) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:384) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1009) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:255) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:154) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:368) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.BlockingHttpConnection.handleRequest(BlockingHttpConnection.java:53) at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:942) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1004) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:640) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235) at org.eclipse.jetty.server.BlockingHttpConnection.handle(BlockingHttpConnection.java:72) at org.eclipse.jetty.server.bio.SocketConnector$ConnectorEndPoint.run(SocketConnector.java:264) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.solr.common.SolrException: Could not load conf for core collection1: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml at org.apache.solr.core.ConfigSetService.getConfig(ConfigSetService.java:66) at org.apache.solr.core.CoreContainer.create(CoreContainer.java:489) at org.apache.solr.core.CoreContainer$1.call(CoreContainer.java:255) at org.apache.solr.core.CoreContainer$1.call(CoreContainer.java:249) at java.util.concurrent.FutureTask.run(FutureTask.java:262) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) ... 1 more Caused by: org.apache.solr.common.SolrException: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml at org.apache.solr.schema.IndexSchema.readSchema(IndexSchema.java:595) at org.apache.solr.schema.IndexSchema.<init>(IndexSchema.java:166) at org.apache.solr.schema.IndexSchemaFactory.create(IndexSchemaFactory.java:55) at org.apache.solr.schema.IndexSchemaFactory.buildIndexSchema(IndexSchemaFactory.java:69) at org.apache.solr.core.ConfigSetService.createIndexSchema(ConfigSetService.java:90) at org.apache.solr.core.ConfigSetService.getConfig(ConfigSetService.java:62) ... 7 more Caused by: org.apache.solr.common.SolrException: Unknown fieldType 'text_general' specified on field text at org.apache.solr.schema.IndexSchema.loadFields(IndexSchema.java:638) at org.apache.solr.schema.IndexSchema.readSchema(IndexSchema.java:489) ... 12 more ,code=500} On Thu, Mar 5, 2015 at 5:04 PM, Muzaffer Tolga Ozses <tolga(a)ozses.net> wrote: > Sure thing > > On 5 March 2015 at 11:52, Kevin Laurie <superinterstellar(a)gmail.com> wrote: >> >> No i dont have it. >> there is body field though. I think text is needed. Let me add it in and >> see. >> Thanks >> >> >> On Thu, Mar 5, 2015 at 4:42 PM, Muzaffer Tolga Ozses <tolga(a)ozses.net> >> wrote: >> > Leon gave you the answer. Check if you have it, define if you don't, and >> > restart the service. >> > >> > On 5 March 2015 at 11:24, Kevin Laurie <superinterstellar(a)gmail.com> >> > wrote: >> >> >> >> Hi Muzaffer, >> >> Could you help by checking this? Should I provide my solrconfig.xml >> >> too? >> >> Please advise urgently. I really need this to work man.Thanks! >> >> >> >> >> >> >> >> >> >>  >> >> <schema name="dovecot" version="1.5"> >> >> >> >> <field name="_version_" type="long" indexed="true" stored="true"/> >> >> <field name="_root_" type="string" indexed="true" stored="false"/> >> >> >> >> <types> >> >>  >> >> <fieldType name="string" class="solr.StrField" omitNorms="true"/> >> >> <fieldType name="long" class="solr.LongField" omitNorms="true"/> >> >> <fieldType name="slong" class="solr.SortableLongField" >> >> omitNorms="true"/> >> >> <fieldType name="float" class="solr.FloatField" omitNorms="true"/> >> >> <fieldType name="boolean" class="solr.BoolField" omitNorms="true"/> >> >> >> >> <fieldType name="text" class="solr.TextField" >> >> positionIncrementGap="100"> >> >> <analyzer type="index"> >> >> <tokenizer class="solr.WhitespaceTokenizerFactory"/> >> >> <filter class="solr.StopFilterFactory" ignoreCase="true" >> >> words="stopwords.txt"/> >> >> <filter class="solr.WordDelimiterFilterFactory" >> >> generateWordParts="1" generateNumberParts="1" catenateWords="1" >> >> catenateNumbers="1" catenateAll="0"/> >> >> <filter class="solr.LowerCaseFilterFactory"/> >> >>  >> >> <filter class="solr.SnowballPorterFilterFactory" >> >> protected="protwords.txt"/> >> >> <filter class="solr.NGramFilterFactory" minGramSize="3" >> >> maxGramSize="15"/> >> >> <filter class="solr.RemoveDuplicatesTokenFilterFactory"/> >> >> </analyzer> >> >> <analyzer type="query"> >> >> <tokenizer class="solr.WhitespaceTokenizerFactory"/> >> >> <filter class="solr.SynonymFilterFactory" >> >> synonyms="synonyms.txt" ignoreCase="true" expand="true"/> >> >> <filter class="solr.StopFilterFactory" ignoreCase="true" >> >> words="stopwords.txt"/> >> >> <filter class="solr.WordDelimiterFilterFactory" >> >> generateWordParts="1" generateNumberParts="1" catenateWords="0" >> >> catenateNumbers="0" catenateAll="0"/> >> >> <filter class="solr.LowerCaseFilterFactory"/> >> >>  >> >> <filter class="solr.SnowballPorterFilterFactory" >> >> protected="protwords.txt"/> >> >> <filter class="solr.RemoveDuplicatesTokenFilterFactory"/> >> >> </analyzer> >> >> </fieldType> >> >> </types> >> >> >> >> >> >> <fields> >> >> <field name="id" type="string" indexed="true" stored="true" >> >> required="true" /> >> >> <field name="uid" type="slong" indexed="true" stored="true" >> >> required="true" /> >> >> <field name="box" type="string" indexed="true" stored="true" >> >> required="true" /> >> >> <field name="user" type="string" indexed="true" stored="true" >> >> required="true" /> >> >> >> >> <field name="hdr" type="text" indexed="true" stored="false" /> >> >> <field name="body" type="text" indexed="true" stored="false" /> >> >> >> >> <field name="from" type="text" indexed="true" stored="false" /> >> >> <field name="to" type="text" indexed="true" stored="false" /> >> >> <field name="cc" type="text" indexed="true" stored="false" /> >> >> <field name="bcc" type="text" indexed="true" stored="false" /> >> >> <field name="subject" type="text" indexed="true" stored="false" /> >> >> </fields> >> >> >> >> <uniqueKey>id</uniqueKey> >> >> <defaultSearchField>body</defaultSearchField> >> >> <solrQueryParser defaultOperator="AND" /> >> >> </schema> >> >> >> >> >> >> On Thu, Mar 5, 2015 at 3:48 PM, Leon Kyneur <leon(a)dexterous.org> wrote: >> >> > In your schema.XML check you have defined: >> >> > >> >> > <field name="text" type="text_general" indexed="true" stored="false" >> >> > multiValued="true"/> >> >> > >> >> > On 05/03/2015 7:11 PM, "Kevin Laurie" <superinterstellar(a)gmail.com> >> >> > wrote: >> >> >> >> >> >> Hello, >> >> >> My dovecot constantly runs into this error. >> >> >> I want to fix this one last time, I am tired of troubleshooting so >> >> >> please someone give me a lasting and proper solution for this error. >> >> >> I >> >> >> think its a problem with the dovecot-solr module. >> >> >> >> >> >> Please tell me how do I find the root of this problem with Dovecot. >> >> >> There is a problem with the body search text field. It always >> >> >> fails(with no result), other searches work(ie. search date, subject >> >> >> etc, ) The field-text I believe is missing. Please help. Desperate >> >> >> here! >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> 2/25/2015, 11:32:30 PM ERROR SolrCore >> >> >> org.apache.solr.common. >> >> >> SolrException: undefined field text >> >> >> >> >> >> org.apache.solr.common.SolrException: undefined field text >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.schema.IndexSchema.getDynamicFieldType(IndexSchema.java:1269) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.schema.IndexSchema$SolrQueryAnalyzer.getWrappedAnalyzer(IndexSchema.java:434) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.lucene.analysis.DelegatingAnalyzerWrapper$DelegatingReuseStrategy.getReusableComponents(DelegatingAnalyzerWrapper.java:74) >> >> >> at >> >> >> org.apache.lucene.analysis.Analyzer.tokenStream(Analyzer.java:175) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.lucene.util.QueryBuilder.createFieldQuery(QueryBuilder.java:207) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.newFieldQuery(SolrQueryParserBase.java:374) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.getFieldQuery(SolrQueryParserBase.java:742) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.handleBareTokenQuery(SolrQueryParserBase.java:541) >> >> >> at org.apache.solr.parser.QueryParser.Term(QueryParser.java:299) >> >> >> at org.apache.solr.parser.QueryParser.Clause(QueryParser.java:185) >> >> >> at org.apache.solr.parser.QueryParser.Query(QueryParser.java:107) >> >> >> at >> >> >> >> >> >> org.apache.solr.parser.QueryParser.TopLevelQuery(QueryParser.java:96) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.parse(SolrQueryParserBase.java:151) >> >> >> at org.apache.solr.search.LuceneQParser.parse(LuceneQParser.java:50) >> >> >> at org.apache.solr.search.QParser.getQuery(QParser.java:141) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.handler.component.QueryComponent.prepare(QueryComponent.java:148) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:197) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) >> >> >> at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.core.QuerySenderListener.newSearcher(QuerySenderListener.java:64) >> >> >> at org.apache.solr.core.SolrCore$5.call(SolrCore.java:1739) >> >> >> at java.util.concurrent.FutureTask.run(FutureTask.java:262) >> >> >> at >> >> >> >> >> >> >> >> >> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) >> >> >> at >> >> >> >> >> >> >> >> >> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) >> >> >> at java.lang.Thread.run(Thread.java:745) >> > >> > >> > >> > >> > -- >> > mto > > > > > -- > mto

2 2

Weird sub-folder error
by Christian Theune 05 Mar '15

05 Mar '15

Hi, I’m running dovecot 2.2.13 and I ran into a weird problem. A user migrated his mailboxes by letting users copy them from their old server to the new one through their MUA. All that went fine except for one very weird instance. The user is running Outlook 2010. The user has a sub-folder structure which dovecot places as dotted names beneath the Inbox. (E.g. Maildir/.my.sub.folders). After copying all data, that user came back to us and complained about missing mails in their folders. Apparently 3 of her folders disappeared. I found folders with similar (but different!) names in the dovecot storage but with no mails in them. After a while I noticed that something made dovecot create another level of nesting, like this: Maildir/.My.Folder/Subfolder In this case the Original folder structure was INBOX - My - Folder - Subfolder. When the user visited the subscription settings in her MUA she found the INBOX - My - Folder mailbox which was empty. The Subfolder was nowhere to be found. This appeared weird to me. I moved the Subfolder back directly under the Maildir directory and named it “.My.Folder.Subfolder”. doveadm now lists this folder correctly. I could not find whether this is a known bug - so I’m letting you know. Maybe you can help understand what happened. Sounds like a weird server-side bug to me - this shouldn’t happen, right? Cheers, Christian — Christian Theune · ct(a)flyingcircus.io · +49 345 219401 0 Flying Circus Internet Operations GmbH · http://flyingcircus.io Forsterstraße 29 · 06112 Halle (Saale) · Deutschland HR Stendal HRB 21169 · Geschäftsführer: Christian. Theune, Christian. Zagrodnick

2 4

Dovecot Full Text Search results in SolrException: undefined field text [SERIOUS]
by Kevin Laurie 05 Mar '15

05 Mar '15

Hello, My dovecot constantly runs into this error. I want to fix this one last time, I am tired of troubleshooting so please someone give me a lasting and proper solution for this error. I think its a problem with the dovecot-solr module. Please tell me how do I find the root of this problem with Dovecot. There is a problem with the body search text field. It always fails(with no result), other searches work(ie. search date, subject etc, ) The field-text I believe is missing. Please help. Desperate here! 2/25/2015, 11:32:30 PM ERROR SolrCore org.apache.solr.common. SolrException: undefined field text org.apache.solr.common.SolrException: undefined field text at org.apache.solr.schema.IndexSchema.getDynamicFieldType(IndexSchema.java:1269) at org.apache.solr.schema.IndexSchema$SolrQueryAnalyzer.getWrappedAnalyzer(IndexSchema.java:434) at org.apache.lucene.analysis.DelegatingAnalyzerWrapper$DelegatingReuseStrategy.getReusableComponents(DelegatingAnalyzerWrapper.java:74) at org.apache.lucene.analysis.Analyzer.tokenStream(Analyzer.java:175) at org.apache.lucene.util.QueryBuilder.createFieldQuery(QueryBuilder.java:207) at org.apache.solr.parser.SolrQueryParserBase.newFieldQuery(SolrQueryParserBase.java:374) at org.apache.solr.parser.SolrQueryParserBase.getFieldQuery(SolrQueryParserBase.java:742) at org.apache.solr.parser.SolrQueryParserBase.handleBareTokenQuery(SolrQueryParserBase.java:541) at org.apache.solr.parser.QueryParser.Term(QueryParser.java:299) at org.apache.solr.parser.QueryParser.Clause(QueryParser.java:185) at org.apache.solr.parser.QueryParser.Query(QueryParser.java:107) at org.apache.solr.parser.QueryParser.TopLevelQuery(QueryParser.java:96) at org.apache.solr.parser.SolrQueryParserBase.parse(SolrQueryParserBase.java:151) at org.apache.solr.search.LuceneQParser.parse(LuceneQParser.java:50) at org.apache.solr.search.QParser.getQuery(QParser.java:141) at org.apache.solr.handler.component.QueryComponent.prepare(QueryComponent.java:148) at org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:197) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) at org.apache.solr.core.QuerySenderListener.newSearcher(QuerySenderListener.java:64) at org.apache.solr.core.SolrCore$5.call(SolrCore.java:1739) at java.util.concurrent.FutureTask.run(FutureTask.java:262) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745)

3 3

Re: Re: IP drop list
by Joseph Tam 05 Mar '15

05 Mar '15

Nick Edwards writes: > I thought Timo once said dovecot had tarpitting, its useless if it is > there, and if it is, it needs user configurable timings, or maybe its > one of those things thats been in the gunna happen list > for a long time, like other stuff If I remember correctly, I think this was the "auth_failure_delay" feature. However, these delays are only inserted into the same session -- no IP tracking is done so a BFD attacking host can just keep opening up new connections. Dave McGuire writes: >>>> Please add this support to iptables instead of Dovecot. It's a >>>> waste of effort to code it into every application that listens on >>>> the network. >>> >>> <head explodes> >>> >>> Would you care to integrate it into IOS on my Cisco as well? >>> >>> There are things connected to the Internet that aren't PCs running >>> Linux, you know. It may be hard to accept, but that's the way it is. >>> >> I assume your dovecot runs on some kind of *nix > > Of course. I run it under Solaris. Oddly enough, if you run some versions of Solaris, it uses IPFilter as the native firewall, and it *does* have userland hooks so that you can make pass/block decisions based on userland executable. Not well documented though (see auth rules). You would need a firewall rule like auth in proto tcp from any to any port = 143 flags S/SA keep state then write a program that does ioctl(ipauth) calls to inspect and accept/reject packets; not for the faint of heart. However, you can use whatever weird and wonderful methods you want to determine IMAP/POP/SMTP network access policy, including DNSRBL or parsing a text file. This thread seems to be spinning into non-dovecot subjects, and I'm not helping, so I'll stop. Joseph Tam <jtam.home(a)gmail.com>

1 0